{"report_id":"e14f01fd-26f2-4415-8d81-66cac8bfaf36","version":6,"status":"done","tags":[],"date":"2024-05-21T04:11:40Z","url":{"schema":"http","addr":"grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html","fqdn":"grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.210","port":0,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"final":{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"title":"richardl.xyz"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-25T16:11:05Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2024-05-15 18:17:59","alert_count":0,"request_count":1,"received_data":75335,"sent_data":456,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2024-05-18 18:20:21","alert_count":0,"request_count":4,"received_data":195616,"sent_data":3388,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2024-05-20 00:20:52","alert_count":0,"request_count":2,"received_data":2093,"sent_data":1009,"comment":"","tags":null,"fingerprints":null},{"fqdn":"grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","ip":{"addr":"103.224.182.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":379,"sent_data":516,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":41993,"sent_data":2280,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"","description":"","date":"2024-05-21T04:11:20Z","timestamp":1716264680,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-21T04:11:20.208317+0000\",\"flow_id\":1282069714239572,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":59364,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"grabelgal.duckdns.org\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":456,\"bytes_toclient\":116,\"start\":\"2024-05-21T04:07:01.655444+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-05-21T04:11:21Z","timestamp":1716264681,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59400,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-21T04:11:21.132909+0000\",\"flow_id\":396325051341435,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":59400,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"grabelgal.duckdns.org\",\"url\":\"/adobe/Antibot/Isp.php\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":597,\"bytes_toclient\":116,\"start\":\"2024-05-21T04:07:02.498299+0000\"}}"},{"sensor_name":"suricata","title":"","description":"","date":"2024-05-21T04:11:26Z","timestamp":1716264686,"ip_dst":{"addr":"192.169.69.26","port":80,"asn":27323,"as":"SERVERSTADIUM","country":"United States","country_code":"US"},"ip_src":{"addr":"Client IP","port":59458,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain","source":"{\"timestamp\":\"2024-05-21T04:11:26.227746+0000\",\"flow_id\":2130237708526446,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.9\",\"src_port\":59458,\"dest_ip\":\"192.169.69.26\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2042937,\"rev\":2,\"signature\":\"ET INFO DYNAMIC_DNS HTTP Request to a *.duckdns .org Domain\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_and_Server\"],\"created_at\":[\"2022_12_15\"],\"deployment\":[\"Perimeter\"],\"former_category\":[\"INFO\"],\"mitre_tactic_id\":[\"TA0011\"],\"mitre_tactic_name\":[\"Command_And_Control\"],\"mitre_technique_id\":[\"T1568\"],\"mitre_technique_name\":[\"Dynamic_Resolution\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_03_02\"]}},\"http\":{\"hostname\":\"grabelgal.duckdns.org\",\"url\":\"/adobe/Antibot/Isp.php\",\"http_user_agent\":\"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":2,\"bytes_toserver\":597,\"bytes_toclient\":116,\"start\":\"2024-05-21T04:07:03.877422+0000\"}}"}]}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cfd3fc72cb1d7b5e3d7f4df6da8339d4","sha1":"ec45b6a6a357b925b7fb3ddff1069d02baa92dee","sha256":"4cb0f438bc80fddcacc8a646123e083ae3c03c9e1fcc78909126402d4eb22afb","sha512":"f974289012d4d878a35f3160f3348dc00bd90bb3b37473e8b3d5ca474fb450b714cc2cfb5bcce9bd400fd2baee9db98914ee6fc1b28d5a1ccfd4eec3a4bf186f","ssdeep":"","tlshash":"fff005697915ebdfc0761503097928e4c19914b40fb19dc9eff008455b005af30344fe","size":527,"data":"","first_seen":"2024-08-19T22:20:51.029334Z","last_seen":"2024-08-19T22:20:51.029334Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/bnlUUmWcC.js","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f48baec69cc4dc0852d118259eff2d56","sha1":"e64c6e4423421da5b35700154810cb67160bc32b","sha256":"463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c","sha512":"06fdccb5d9536ab7c68355dbf49ac02ebccad5a4ea01cb62200fd67728a6d05c276403e588a5bdceacf5e671913fc65b63e8b92456ca5493dae5b5a70e4a8b37","ssdeep":"768:TP2yR8VcbMnnZNdxBB5gPi0y8rnaVG4xYEW0Ddem+euROvvMzLXWI+6Ch75BGJ21:KnQrnSG4xYE4RLm","tlshash":"33e22ba23af7e06046e2c1dae4775215f738610a3405c06cf96c88ce3a5ae47d73eb75","size":33791,"data":"","first_seen":"2024-04-22T21:49:17Z","last_seen":"2024-08-20T03:18:22.479053Z","times_seen":7944,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0fa95cabd9a0bc9b81191e1e0dbd252","sha1":"8227c9de4ef2e0f6a946eb070274c6bb827ff664","sha256":"aa56e66623c94c7f120048272ff15e312b13ecd2eae6a110410fcd8e43023b08","sha512":"a62b5736424539ab12050e92a3abd1c4595b435fda52f08797083e8226be34a3daca079f446caf8ac924e5e726f70bb6ce2884935955a827c8be0208696fa97c","ssdeep":"3072:K7FweXBcXyGqPDq7wX38XqXGuN6tyJU+XjM:Ki4BG6TXjNUyeAw","tlshash":"af047bddb2b57026575394a0903f064fb23aed19e84985b8f089d4e5bcb8ce94363f78","size":190012,"data":"","first_seen":"2024-05-15T21:16:54Z","last_seen":"2024-08-19T22:50:59.128575Z","times_seen":592,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol416%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol202\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20240521-1411-1518-8702-122feca40b8c\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2589285024539458\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442\u0026client_gdprApplies=1\u0026format=r3\u0026nocache=3821716264676408\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1716264676409\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=633245794\u0026rurl=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2Fusps%2Fverification.html%3Fsubid1%3D20240521-1411-1518-8702-122feca40b8c","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cad143f3f1f5c45749a8500a63043cc7","sha1":"9710405db83ca0a2062bdca06ee5f9b3a6894166","sha256":"f90b18a78ce8ecce9f544e5c3d2121985d1f87bf1596791b54ebb54e8b5eea60","sha512":"27334f297aca9c5f983cfbfbfdf7441b6bac986db64e2708e5c2df51af82fe5a403463ec21ea653a758c9d6752ab98ff756be0a16e0cab6e8f709d9078478cac","ssdeep":"","tlshash":"aa0199961c644672ca7b1162581f3fa024ee247122cb3585a01eb8aa247cedf66290fb","size":658,"data":"","first_seen":"2024-08-19T22:20:51.030654Z","last_seen":"2024-08-19T22:20:51.030654Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa914d6f022142e6e71f59031af233fe","sha1":"fc5d71dcc3c257d47083ec782a28389293c1b1f4","sha256":"9d72a2e0545f9920764c334188c8b67dcd878f743034b99ca496b6159659d79b","sha512":"16b370a4b1185d76fac794516f6f226584b32d19503cd8ec7d4597f58f2805a47849094cbf7b68c55eeb65d49a5b4633742c9a22e753008226586e2c4943ca19","ssdeep":"3072:f7FweXBcXyGqPDq7wX38XqXGuN6tyJU+XjM:fi4BG6TXjNUyeAw","tlshash":"13047bddb2b57026575394a0903f064fb23aed19e84985b8f089d4e5bcb8ce94363f78","size":190037,"data":"","first_seen":"2024-05-15T19:47:55Z","last_seen":"2024-08-19T22:51:35.14058Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html","fqdn":"grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"103.224.182.210","port":443,"asn":133618,"as":"Trellian Pty. Limited","country":"Australia","country_code":"AU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-21T04:11:14.932Z","timestamp":1716264674932,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bymnmal.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Apr 2024 05:01:50 GMT","end":"Mon, 22 Jul 2024 05:01:49 GMT"},"fingerprint":{"sha1":"64:EB:43:C7:C3:DE:B5:39:C3:71:FF:59:5B:17:C0:A9:72:A4:81:AF","sha256":"92:10:2B:CC:03:4B:DD:A4:CC:6F:54:BA:05:F4:28:76:29:AA:29:43:9C:88:8F:36:58:0A:50:93:6D:73:DA:E5"}}},"request":{"raw":"GET /usps/verification.html HTTP/1.1\r\nHost: grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\ndate: Tue, 21 May 2024 04:11:15 GMT\r\nserver: Apache\r\nset-cookie: __tad=1716264675.6831196; expires=Fri, 19-May-2034 04:11:15 GMT; Max-Age=315360000\r\nlocation: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c\r\ncontent-length: 2\r\ncontent-type: text/html; charset=UTF-8\r\nconnection: close\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":2,"size_decoded":2,"mime_type":"text/html; charset=utf-8","magic":"ASCII text","md5":"e1c06d85ae7b8b032bef47e42e4c08f9","sha1":"71853c6197a6a7f222db0f1978c7cb232b87c5ee","sha256":"75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070","sha512":"016ba8c4cfde65af99cb5fa8b8a37e2eb73f481b3ae34991666df2e04feb6c038666ebd1ec2b6f623967756033c702dde5f423f7d47ab6ed1827ff53783731f7","ssdeep":"","tlshash":"c710000000000000000000000000000000300000000000000000003000000000000000","first_seen":"2023-03-07T01:03:30Z","last_seen":"2026-05-27T18:11:08.984089Z","times_seen":44641,"resource_available":true,"data":null}},"time_used":888,"timings":{"blocked":333,"dns":0,"connect":154,"send":0,"wait":222,"receive":0,"ssl":175},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-05-21T04:11:15.496Z","timestamp":1716264675496,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c HTTP/1.1\r\nHost: ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 21 May 2024 04:11:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1274\r\nx-request-id: 1e9fcaa5-90b0-426c-b658-8745e2c7b748\r\ncache-control: no-store, max-age=0\r\naccept-ch: sec-ch-prefers-color-scheme\r\ncritical-ch: sec-ch-prefers-color-scheme\r\nvary: sec-ch-prefers-color-scheme\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_qPiq5GEw6C7n200fuwIOkO0dyxoClqSxpckaiWs75jSgFSiizfdEhdbCVS58jAT+T7nob4t6aSLtKPef+MBcEA==\r\nset-cookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748; expires=Tue, 21 May 2024 04:26:15 GMT; path=/\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1274,"size_decoded":1274,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (542)","md5":"efc53b5892efe699bb7fbed9f69a5b58","sha1":"c0314177e0bbf2f146093f6dc3a317d9d9d8079a","sha256":"50b16b0f1b9608181f12b9b59411a2e57a00cb2f88e251f42c7293fcd45e64f4","sha512":"29963f11bfeded2c3356563c4bcf30132e8cd9e2138147934f5042c996d977799a60dbcc661d726cd5a24d4d8be5e6c1762e0209308561f22301701283d38474","ssdeep":"","tlshash":"1921ea763412eb8b50f145411d74656ccc0a3a6c4b626cc4bffcd0765e846d374351ed","first_seen":"2024-08-19T22:20:51.021781Z","last_seen":"2024-08-19T22:20:51.021781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":190,"dns":189,"connect":1,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/bnlUUmWcC.js","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:16.034Z","timestamp":1716264676034,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bnlUUmWcC.js HTTP/1.1\r\nHost: ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c\r\nCookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 21 May 2024 04:11:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 33791\r\nx-request-id: 4388474f-0561-4813-861e-a1bcd05c78cc\r\nset-cookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748; expires=Tue, 21 May 2024 04:26:16 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":33791,"size_decoded":33791,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (33788)","md5":"f48baec69cc4dc0852d118259eff2d56","sha1":"e64c6e4423421da5b35700154810cb67160bc32b","sha256":"463d99ca5448f815a05b2d946ddae9eed3e21c335c0f4cfe7a16944e3512f76c","sha512":"06fdccb5d9536ab7c68355dbf49ac02ebccad5a4ea01cb62200fd67728a6d05c276403e588a5bdceacf5e671913fc65b63e8b92456ca5493dae5b5a70e4a8b37","ssdeep":"768:TP2yR8VcbMnnZNdxBB5gPi0y8rnaVG4xYEW0Ddem+euROvvMzLXWI+6Ch75BGJ21:KnQrnSG4xYE4RLm","tlshash":"33e22ba23af7e06046e2c1dae4775215f738610a3405c06cf96c88ce3a5ae47d73eb75","first_seen":"2024-04-22T21:49:17Z","last_seen":"2024-08-20T03:18:22.479053Z","times_seen":7944,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/_fd?subid1=20240521-1411-1518-8702-122feca40b8c","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:16.087Z","timestamp":1716264676087,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd?subid1=20240521-1411-1518-8702-122feca40b8c HTTP/1.1\r\nHost: ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c\r\nContent-Type: application/json\r\nOrigin: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Tue, 21 May 2024 04:11:15 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 5221\r\nx-request-id: c66c814f-fe5e-47fe-99d4-c0867d93d8e6\r\nset-cookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748; expires=Tue, 21 May 2024 04:26:16 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5221,"size_decoded":5221,"mime_type":"application/json; charset=utf-8","magic":"ASCII text, with very long lines (5221), with no line terminators","md5":"fda40e544b11f05cd437edb8a67dd63c","sha1":"e0e30004843e3ce2672852ad4d782e946af726fb","sha256":"017d0717ef76e837720b6dc00c85a82a5b483b2f5de652cb274567a6a2f8c4b4","sha512":"704a6c0dff4cf1329dd56d8eec66ac1ef6cdf42d4529b756b741d4922ea8924ee3f71420ccd9dd68981c102fdc85357681eb3a0a81ea0a8c173a4cef342a063e","ssdeep":"96:N99P8pSML8IuQ0omwoPULGQwC7O3OpEXSpXw/rMRn:tP8pJLpuQPmwcS/7O+pEXS6z+n","tlshash":"32b185fb8a18799ecb03460335cf43e9534ed3af36a9215d064bd6494a1894f7ad023b","first_seen":"2024-08-19T22:20:51.023204Z","last_seen":"2024-08-19T22:20:51.023204Z","times_seen":1,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js?abp=1\u0026bodis=true","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:16.169Z","timestamp":1716264676169,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 14:44:50 GMT","end":"Mon, 29 Jul 2024 14:44:49 GMT"},"fingerprint":{"sha1":"83:5E:48:E2:59:C5:EB:B8:6A:08:D7:56:90:A5:F5:18:4B:C8:B1:DF","sha256":"9F:45:33:B0:E8:B0:4D:BC:50:41:5F:99:2D:B0:21:9E:2D:6A:66:C2:30:81:2E:F9:40:B4:03:68:1A:CC:C8:A5"}}},"request":{"raw":"GET /adsense/domains/caf.js?abp=1\u0026bodis=true HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Tue, 21 May 2024 04:11:16 GMT\r\nexpires: Tue, 21 May 2024 04:11:16 GMT\r\ncache-control: private, max-age=3600\r\netag: \"7891196664755221497\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":74485,"size_decoded":74485,"mime_type":"text/javascript; charset=UTF-8","magic":"gzip compressed data, max compression","md5":"67035314cced55c70fcf309c7e82b790","sha1":"d05274814e8d041ac3322e7dff7645b6744c2b25","sha256":"5674c0d180f3a689bd456c5e647fc76f6ec83c5f269da3998e8624879e1c0ffb","sha512":"f49c78df8d29a384361d05e3304c5cf464ca9f688721ca46252e62126c2ea431e8cb3ffc664feea12a065ba595dea7b80de6ede11bdb87c5634a7038aa902725","ssdeep":"1536:BAKMZ8enPWSXnT03ds+ke0Ve5US2hTBBtw7miv/3aEuAu+ghIB8wPuf:fMZRP3P+k/VAUS2hA3aEuAuhhIB8x","tlshash":"6f73124c29b55ca6e93103ad8dfc2854ece631c1ac4a619d8efb199775070ac73bc9ec","first_seen":"2024-05-21T00:18:43Z","last_seen":"2024-08-19T22:21:51.809115Z","times_seen":44,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":112,"dns":1,"connect":21,"send":0,"wait":32,"receive":37,"ssl":88},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol416%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol202\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20240521-1411-1518-8702-122feca40b8c\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2589285024539458\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442\u0026client_gdprApplies=1\u0026format=r3\u0026nocache=3821716264676408\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1716264676409\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=633245794\u0026rurl=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2Fusps%2Fverification.html%3Fsubid1%3D20240521-1411-1518-8702-122feca40b8c","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:16.421Z","timestamp":1716264676421,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 13:47:43 GMT","end":"Mon, 29 Jul 2024 13:47:42 GMT"},"fingerprint":{"sha1":"81:C6:B2:1A:A6:AA:D7:F4:8B:85:58:AC:53:AE:6C:8D:68:78:C9:EA","sha256":"B1:AA:58:F9:A6:7B:46:28:17:F3:08:09:F9:38:B5:15:29:80:80:A8:98:8B:89:37:96:92:49:BC:9C:23:5D:5B"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol416%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol202\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20240521-1411-1518-8702-122feca40b8c\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2589285024539458\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442\u0026client_gdprApplies=1\u0026format=r3\u0026nocache=3821716264676408\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1716264676409\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=633245794\u0026rurl=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2Fusps%2Fverification.html%3Fsubid1%3D20240521-1411-1518-8702-122feca40b8c HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Tue, 21 May 2024 04:11:16 GMT\r\nexpires: Tue, 21 May 2024 04:11:16 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-aHu-x5tVhLkl_WtxH73iqw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2648\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2648,"size_decoded":13920,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (13317)","md5":"3d4004d679e8617898878dccc26ddd08","sha1":"be1b6b7b77907b31a86dcc7e2a67e0af6ec29f3e","sha256":"7a08ae46b4387183ddda55b7415f0888314a0b49ff62f2107ceef6727cc76fa3","sha512":"7c2219f2e6d75c76f30e1ed7ec31f2b7c112234d6d255389060b5ca0ca30d39e2bc5cccaa26fe9ac7d8a27c64f9f49a3ac90cfcf32e2769b36e76f4b5aca0a43","ssdeep":"96:GE/yk2iwlb5lphMzwronSc90IMvm0yEM6vfNYrWib9zM8DlTw9eDXb92M8DNw9eH:GE12ikpgn9+m0yEMcfWrzffdBMNoFkB","tlshash":"01524337746227290507dc541b2a6f5dd181d43ac4af35e948a35f26c7ebf838be228e","first_seen":"2024-08-19T22:20:51.024781Z","last_seen":"2024-08-19T22:20:51.024781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":60,"dns":0,"connect":7,"send":0,"wait":88,"receive":0,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/_tr","fqdn":"ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz","domain":"richardl.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:17.127Z","timestamp":1716264677127,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c\r\nContent-Type: application/json\r\nContent-Length: 2017\r\nOrigin: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Tue, 21 May 2024 04:11:17 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nx-version: 2.118.1\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=1e9fcaa5-90b0-426c-b658-8745e2c7b748; expires=Tue, 21 May 2024 04:26:17 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":2,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-05-27T18:16:02.066228Z","times_seen":418021,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol416%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol202\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20240521-1411-1518-8702-122feca40b8c\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2589285024539458\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442\u0026client_gdprApplies=1\u0026format=r3\u0026nocache=3821716264676408\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1716264676409\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=633245794\u0026rurl=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2Fusps%2Fverification.html%3Fsubid1%3D20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:17.161Z","timestamp":1716264677161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 14:38:03 GMT","end":"Mon, 29 Jul 2024 14:38:02 GMT"},"fingerprint":{"sha1":"2E:38:9A:0F:59:C0:30:5C:D9:2D:24:42:7A:C1:B5:4F:11:38:7B:9A","sha256":"ED:68:D8:F3:DB:6F:BC:EA:56:B3:8B:7E:47:60:05:2D:A1:CB:86:C7:08:79:9B:F9:50:EA:DD:44:72:B9:AA:84"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 21 May 2024 03:40:42 GMT\r\nexpires: Wed, 22 May 2024 02:40:42 GMT\r\ncache-control: public, max-age=82800\r\nage: 1835\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":278,"size_decoded":444,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fe7dd8c3c629cc6e9cd6d3e4d3cbe905","sha1":"59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18","sha256":"5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e","sha512":"1c663e07978d95c838aed54421a9c725d7311b8c002f436b30555affb26c25f6ebecff6af5c54ef112370a36a5f5aadf611304bffe76a59fb3d206e943cf153f","ssdeep":"","tlshash":"eff055bcd2ad4914a608c7017ef8a5174066f0c563cc01ceee81ac69f0614e43a63ade","first_seen":"2023-04-07T08:14:08Z","last_seen":"2026-05-26T18:36:43.383042Z","times_seen":69556,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":67,"dns":0,"connect":8,"send":0,"wait":8,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol416%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol202\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20240521-1411-1518-8702-122feca40b8c\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2589285024539458\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442\u0026client_gdprApplies=1\u0026format=r3\u0026nocache=3821716264676408\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1716264676409\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=633245794\u0026rurl=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2Fusps%2Fverification.html%3Fsubid1%3D20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:17.163Z","timestamp":1716264677163,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 14:38:03 GMT","end":"Mon, 29 Jul 2024 14:38:02 GMT"},"fingerprint":{"sha1":"2E:38:9A:0F:59:C0:30:5C:D9:2D:24:42:7A:C1:B5:4F:11:38:7B:9A","sha256":"ED:68:D8:F3:DB:6F:BC:EA:56:B3:8B:7E:47:60:05:2D:A1:CB:86:C7:08:79:9B:F9:50:EA:DD:44:72:B9:AA:84"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 20 May 2024 23:55:23 GMT\r\nexpires: Tue, 21 May 2024 22:55:23 GMT\r\ncache-control: public, max-age=82800\r\nage: 15354\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":200,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":175,"dns":2,"connect":10,"send":0,"wait":9,"receive":0,"ssl":164},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=46r1mczbt9fe\u0026aqid=5B5MZrjcH9eKiM0PrJecwA8\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=633245794\u0026csala=5%7C0%7C578%7C108%7C15\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:18.617Z","timestamp":1716264678617,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 13:47:43 GMT","end":"Mon, 29 Jul 2024 13:47:42 GMT"},"fingerprint":{"sha1":"81:C6:B2:1A:A6:AA:D7:F4:8B:85:58:AC:53:AE:6C:8D:68:78:C9:EA","sha256":"B1:AA:58:F9:A6:7B:46:28:17:F3:08:09:F9:38:B5:15:29:80:80:A8:98:8B:89:37:96:92:49:BC:9C:23:5D:5B"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=46r1mczbt9fe\u0026aqid=5B5MZrjcH9eKiM0PrJecwA8\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=633245794\u0026csala=5%7C0%7C578%7C108%7C15\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-aP06s3ZBTouxiyVK74tSnQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 21 May 2024 04:11:18 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=1glzoldfcex0\u0026aqid=5B5MZrjcH9eKiM0PrJecwA8\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=633245794\u0026csala=5%7C0%7C578%7C108%7C15\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/usps/verification.html?subid1=20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:19.119Z","timestamp":1716264679119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 13:47:43 GMT","end":"Mon, 29 Jul 2024 13:47:42 GMT"},"fingerprint":{"sha1":"81:C6:B2:1A:A6:AA:D7:F4:8B:85:58:AC:53:AE:6C:8D:68:78:C9:EA","sha256":"B1:AA:58:F9:A6:7B:46:28:17:F3:08:09:F9:38:B5:15:29:80:80:A8:98:8B:89:37:96:92:49:BC:9C:23:5D:5B"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=1glzoldfcex0\u0026aqid=5B5MZrjcH9eKiM0PrJecwA8\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=633245794\u0026csala=5%7C0%7C578%7C108%7C15\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ujBQbKn4RKl0eTkW4kwVCQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Tue, 21 May 2024 04:11:19 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-27T18:18:45.099911Z","times_seen":15786144,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol304%2Cpid-bodis-gcontrol416%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol202\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026ivt=0\u0026rpbu=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2F%3Fcaf%3D1%26bpt%3D345%26subid1%3D20240521-1411-1518-8702-122feca40b8c\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2589285024539458\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301437%2C17301439%2C17301442\u0026client_gdprApplies=1\u0026format=r3\u0026nocache=3821716264676408\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1716264676409\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026uio=-\u0026cont=rs\u0026drt=0\u0026jsid=caf\u0026jsv=633245794\u0026rurl=http%3A%2F%2Fww25.grn4sonvgkgbfld7viiif1k2rz.richardl.xyz%2Fusps%2Fverification.html%3Fsubid1%3D20240521-1411-1518-8702-122feca40b8c","date":"2024-05-21T04:11:16.975Z","timestamp":1716264676975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 06 May 2024 13:47:43 GMT","end":"Mon, 29 Jul 2024 13:47:42 GMT"},"fingerprint":{"sha1":"81:C6:B2:1A:A6:AA:D7:F4:8B:85:58:AC:53:AE:6C:8D:68:78:C9:EA","sha256":"B1:AA:58:F9:A6:7B:46:28:17:F3:08:09:F9:38:B5:15:29:80:80:A8:98:8B:89:37:96:92:49:BC:9C:23:5D:5B"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Tue, 21 May 2024 04:11:17 GMT\r\nexpires: Tue, 21 May 2024 04:11:17 GMT\r\ncache-control: private, max-age=3600\r\netag: \"16011452365682431674\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":190037,"size_decoded":190037,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2247)","md5":"aa914d6f022142e6e71f59031af233fe","sha1":"fc5d71dcc3c257d47083ec782a28389293c1b1f4","sha256":"9d72a2e0545f9920764c334188c8b67dcd878f743034b99ca496b6159659d79b","sha512":"16b370a4b1185d76fac794516f6f226584b32d19503cd8ec7d4597f58f2805a47849094cbf7b68c55eeb65d49a5b4633742c9a22e753008226586e2c4943ca19","ssdeep":"3072:f7FweXBcXyGqPDq7wX38XqXGuN6tyJU+XjM:fi4BG6TXjNUyeAw","tlshash":"13047bddb2b57026575394a0903f064fb23aed19e84985b8f089d4e5bcb8ce94363f78","first_seen":"2024-05-15T19:47:55Z","last_seen":"2024-08-19T22:51:35.14058Z","times_seen":264,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}