{"report_id":"f6f78f39-669e-40a3-bf45-cf2b25f7024b","version":6,"status":"done","tags":[],"date":"2023-12-04T21:51:33Z","url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"title":"Lspower.xyz"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T09:07:17Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"default"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":4,"received_data":37056,"sent_data":1957,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.adsensecustomsearchads.com","ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-01-28","domain_rank":0,"first_seen":"2015-09-02 02:57:40","last_seen":"2023-12-04 05:09:58","alert_count":0,"request_count":4,"received_data":60717,"sent_data":3226,"comment":"","tags":null,"fingerprints":null},{"fqdn":"afs.googleusercontent.com","ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":12123,"first_seen":"2013-05-06 21:11:00","last_seen":"2023-12-04 05:11:59","alert_count":0,"request_count":2,"received_data":2262,"sent_data":1035,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2023-11-19 18:48:38","alert_count":0,"request_count":1,"received_data":150486,"sent_data":446,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":null},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"39f85d9671515b5f3d4131c7467b3089","sha1":"28f0b806cf37937bdc9395473b94c5814424ac2f","sha256":"bf41a4a8cc62d48851bf3d772bf82100c23735b4142771305faf10d55ba22ec3","sha512":"a2eae0a66058090a2320d34edac9ffc666078838739fc9ee44186765714c128ad3411abc123e199eaef19031337ed9009e2b4069650b9732c19854d95561dc9f","ssdeep":"","tlshash":"bfe0209e14399eecc132944106575b88dfb818b1546071ccf3905df6595439b5c4c58e","size":359,"data":"","first_seen":"2024-08-20T16:46:14.783227Z","last_seen":"2024-08-20T16:46:14.783227Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/bfzFaSmSo.js","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","size":32054,"data":"","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0808101bcc6e1191c5b6073e31bcb441","sha1":"325317ef7ae2592656dcabfb8462b40f3e3ebc08","sha256":"39359651a0d752d1e777094fd9deed5e4c5993ff6b2aebfd855761f41369b13e","sha512":"754751a2623e4528e0f4d33ca3ccef2262e4a72fd7d329eace58707fc6321adfafed64d8a25dd7af5b4c8f3afb391c5dc1e125ac1bd021fddb551604525508bc","ssdeep":"1536:grPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:b2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"97e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149633,"data":"","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T16:25:25Z","times_seen":2531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol321%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol487\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2439451366973938\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=8751701726682472\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701726682473\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3bff0a801182481562b499d5f5cfbe2","sha1":"78b4c41ded5d0d7cf3b264f8dfa13cc906b74786","sha256":"170ecad5b99413e8363fd7abad952b8e74edda914d4592aaee19cfc05e06a998","sha512":"b2615beca8157ccbbc03e244c6a20360eaa54f15e1bcf3f4c9d45bf77e55972cf2c74d15f825bbee05ca015d234e11d71d1575885890caf08dc825a31f17574b","ssdeep":"","tlshash":"57019e9519650131d8a701161c4e3fa15cdc187122872586a01de8d920bdfdf63790eb","size":659,"data":"","first_seen":"2024-08-20T16:46:14.784349Z","last_seen":"2024-08-20T16:46:14.784349Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"295c98d1ef062dc83574af065c768d68","sha1":"8db1bf9d4d203fda081389f9099fae82fce9995a","sha256":"0dcbe293f090c78fd766dca3b924bd45bb58ede279aab98705b8e57b6b189c8f","sha512":"8a632735d19cf81d3c07c8902f6e9f0a5693a229ce2b0777ec7b94201f18a067dc24bb469cd2b74699aa7015cbeeff33bd860926a9baf8ec0fc167b0ccc6b3b1","ssdeep":"1536:HrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:K2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"afe35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","size":149649,"data":"","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T17:54:00Z","times_seen":1154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2023-12-04T21:51:21.624Z","timestamp":1701726681624,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 04 Dec 2023 21:51:15 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncontent-length: 1077\r\nx-request-id: 924fde2c-ce37-4392-b8fa-85a6a0477402\r\ncache-control: no-store, max-age=0\r\naccept-ch: sec-ch-prefers-color-scheme\r\ncritical-ch: sec-ch-prefers-color-scheme\r\nvary: sec-ch-prefers-color-scheme\r\nx-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_IJ+8lF+bVjAV/c9nhHGAXKCRUcRpT5bH8KuGHygDJtDazP6BgOYUtsVY4RdXen9g4RDrp9h9HyKxt1G7asvtsg==\r\nset-cookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402; expires=Mon, 04 Dec 2023 22:06:16 GMT; path=/\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1077,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (374)","md5":"24d6ecf4e1adfd93aa3c9e8b7dd4d7e0","sha1":"7e65c3b81e3513dcf94a1a0c356c698f033b1ac4","sha256":"cc0727d60f94537496b3ff9f4363e85649ffa481864e455dfc88dd7d43306a52","sha512":"9d5d740e12c6c4caeeb789b94b41bcbb10d89cab200358031164254c49e5cdd832fe36d426da8386ab7eda65b0481ada666cae8267353093c2d1a43330ca09db","ssdeep":"","tlshash":"eb1175ab14358d5d51b144540aa1d20c8c292eada5616dc4b7dce27a8dc43e2ec1d1cc","first_seen":"2023-12-04T22:51:39Z","last_seen":"2023-12-04T22:51:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/bfzFaSmSo.js","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:21.926Z","timestamp":1701726681926,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"GET /bfzFaSmSo.js HTTP/1.1\r\nHost: ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nCookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\ndate: Mon, 04 Dec 2023 21:51:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 32054\r\nx-request-id: e763e604-f7a0-4075-be63-bf6e98e8f942\r\nset-cookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402; expires=Mon, 04 Dec 2023 22:06:16 GMT\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32054,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (32051)","md5":"136bc91b923c115f678c13f3740bf8fa","sha1":"d8044de6e6a8b05f087f9fb73545d5b2e9666d61","sha256":"46e2c2af87720b7ae5a86434547bd9bef9ff21fab2956b64bc48f17dc73c63a7","sha512":"2ff613aa8dc2887a5c2f9d8d40e618ef82b8ffc46392affd32a9fa2225360f1db5244a51f82d5eba8fcf3c200f179da20433761a3ebb6fce0e4ede99d129a3cb","ssdeep":"768:TP2yO6VcKMnneNdxBB5gPi09GrnqVGQxeEigyDdem+euRONzLKBX1TLBJ2w66njL:wnCniGQxeEDRmK","tlshash":"a7e22aa139f7e0604ae2c6caa97b5216f338611a3409d06cf56c88ce3759d47d33ebb5","first_seen":"2023-11-14T16:51:06Z","last_seen":"2024-08-20T19:38:18.077194Z","times_seen":5630,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/_fd","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:22.064Z","timestamp":1701726682064,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_fd HTTP/1.1\r\nHost: ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nContent-Type: application/json\r\nOrigin: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Mon, 04 Dec 2023 21:51:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 2046\r\nx-version: 2.110.4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402; expires=Mon, 04 Dec 2023 22:06:16 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2046,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (3965), with no line terminators","md5":"4de4b800263a11635f7bdcf4e3962b08","sha1":"e3205c8222484a0be7e7a298956748ed9880272b","sha256":"9560cc3fc0394507274a94593a0ebd0116b2f0e986c19ef7f4cfa64c0a6c5d5d","sha512":"d5aef1a6f90041cb19e7887f9894f4e49d97575610a1e40f4ba0b9ce0a1c6eec4d395e9479eb4904d1c17a04f1f6989170079b03a30ff88143c09ea1d582af65","ssdeep":"","tlshash":"4881d6fb0d0dbadccb62c20325df84c6413c47cb2cc1844a896ea2db8e9950e75e027a","first_seen":"2023-12-04T22:51:39Z","last_seen":"2023-12-04T22:51:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol321%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol487\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2439451366973938\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=8751701726682472\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701726682473\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%2F","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:22.494Z","timestamp":1701726682494,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol321%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol487\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2439451366973938\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=8751701726682472\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701726682473\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%2F HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-disposition: inline\r\ndate: Mon, 04 Dec 2023 21:51:16 GMT\r\nexpires: Mon, 04 Dec 2023 21:51:16 GMT\r\ncache-control: private, max-age=3600\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-uyctbQ6mJQWheKbTXishXw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ncontent-encoding: br\r\nserver: gws\r\ncontent-length: 2575\r\nx-xss-protection: 0\r\nset-cookie: CONSENT=PENDING+416; expires=Wed, 03-Dec-2025 21:51:16 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2575,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document text\\012- HTML document text\\012- HTML document text\\012- HTML document text\\012- exported SGML document, ASCII text, with very long lines (13077)","md5":"3c14141ae191cef618093bc7b3988d74","sha1":"f1e8cb1b1544eec92bb5db66843584cebd12d3af","sha256":"920b953eacaca5242586cdcaf000139c81676d5aac66dadcb79cc87367797bde","sha512":"e4a18e7cbdecfedffd2b7b36629d390c7fca977904e165abf2a83df7513ab699aab0cba9ae406e16ecc0f1b84cd82511f7cf91f592d0c24091be33e6fc8f66b9","ssdeep":"96:GE/yk2iwlb5lphMzTronSc90IMvm0yEM6vfNYrW/M8DFTw9eDD5WIBG60M8D9w9y:GE12ikpBn9+m0yEMcfWrC9OA7kL","tlshash":"4452533774a227290503dc5417296f6dd181d53ec46f36e948a35f26c7ebf828be228e","first_seen":"2023-12-04T22:51:39Z","last_seen":"2023-12-04T22:51:39Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":30,"dns":1,"connect":7,"send":0,"wait":81,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/adsense/domains/caf.js","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol321%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol487\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2439451366973938\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=8751701726682472\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701726682473\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%2F","date":"2023-12-04T21:51:22.865Z","timestamp":1701726682865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 04 Dec 2023 21:51:17 GMT\r\nexpires: Mon, 04 Dec 2023 21:51:17 GMT\r\ncache-control: private, max-age=3600\r\netag: \"17662540289770248759\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":54634,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"1de0934558c9e557660d9659700d5e2f","sha1":"841ac62e63610e9dc1747bafe32ddf820e18f483","sha256":"317c557a444ba8d239fd8219e816b58d33990f99837fbaf7b35e2759b94516bc","sha512":"92b81f5cc2f9efd4905adef026dab86667673c299db807765c92487cfeafc2c05e16714c1f962042ebc90dac19142b8b41a7eed9f9ea9032dfc22a734a90b396","ssdeep":"1536:HrPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomH5:K2sAU5QI+t2RqB+Z+Umpa+NilYt9","tlshash":"dce35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","first_seen":"2023-11-10T21:41:16Z","last_seen":"2023-12-09T17:55:07Z","times_seen":18,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol321%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol487\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2439451366973938\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=8751701726682472\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701726682473\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%2F","date":"2023-12-04T21:51:22.990Z","timestamp":1701726682990,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 174\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 07:40:52 GMT\r\nexpires: Tue, 05 Dec 2023 06:40:52 GMT\r\ncache-control: public, max-age=82800\r\nage: 51025\r\nlast-modified: Thu, 02 Nov 2023 22:48:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":174,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with no line terminators","md5":"d47125b2ba92be53dcff07ba322ce1de","sha1":"e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28","sha256":"5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6","sha512":"78a1bf7547b1c28f600163689161955bc56a621ace3228c9169143be933ccf789fc6106bbf729f2e9483bcaa03271529d3913088094c7fb906b44673e13f1f92","ssdeep":"","tlshash":"72d02291d2286d38441e82e0c37c712200ee70a2230c10ccfa81a700720c8abb8a1668","first_seen":"2023-04-07T07:55:51Z","last_seen":"2026-02-01T02:48:24.72202Z","times_seen":175105,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":71,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/_tr","fqdn":"ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz","domain":"lspower.xyz","tld":"xyz"},"ip":{"addr":"199.59.243.225","port":80,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:23.022Z","timestamp":1701726683022,"http_version":"HTTP/1.1","security_state":"insecure","security_info":null,"request":{"raw":"POST /_tr HTTP/1.1\r\nHost: ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nContent-Type: application/json\r\nContent-Length: 1661\r\nOrigin: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nserver: openresty\r\ndate: Mon, 04 Dec 2023 21:51:16 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: gzip\r\ncontent-length: 22\r\nx-version: 2.110.4\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\ncache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0\r\npragma: no-cache\r\nset-cookie: parking_session=924fde2c-ce37-4392-b8fa-85a6a0477402; expires=Mon, 04 Dec 2023 22:06:17 GMT; Max-Age=900; path=/; httponly\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-06-06T19:12:56.724759Z","times_seen":423019,"resource_available":true,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":119,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=gpa5azz9134m\u0026aqid=1EluZbyANZOCxdwPnreYkA0\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=4%7C0%7C398%7C66%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:24.453Z","timestamp":1701726684453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=gpa5azz9134m\u0026aqid=1EluZbyANZOCxdwPnreYkA0\u0026psid=3113057640\u0026pbt=bs\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=4%7C0%7C398%7C66%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Ku-WHFujCkVCypG5eHudcg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 04 Dec 2023 21:51:18 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+615; expires=Wed, 03-Dec-2025 21:51:18 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T20:09:47.269697Z","times_seen":16189918,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.adsensecustomsearchads.com/afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=gfd3r5xsznd8\u0026aqid=1EluZbyANZOCxdwPnreYkA0\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=4%7C0%7C398%7C66%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0","fqdn":"www.adsensecustomsearchads.com","domain":"adsensecustomsearchads.com","tld":"com"},"ip":{"addr":"216.58.211.14","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:24.956Z","timestamp":1701726684956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"misc-sni.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:20:02 GMT","end":"Mon, 15 Jan 2024 11:20:01 GMT"},"fingerprint":{"sha1":"E4:33:2C:42:1C:4F:E6:01:93:AD:F1:5F:70:4D:33:1F:3B:5F:AB:DE","sha256":"14:E8:FE:26:74:27:4C:E3:B6:F8:AA:AA:A2:22:9D:94:5C:B1:99:8E:95:35:82:E3:B8:39:D4:58:B1:C4:37:E8"}}},"request":{"raw":"GET /afs/gen_204?client=dp-bodis31_3ph\u0026output=uds_ads_only\u0026zx=gfd3r5xsznd8\u0026aqid=1EluZbyANZOCxdwPnreYkA0\u0026psid=3113057640\u0026pbt=bv\u0026adbx=290\u0026adby=145\u0026adbh=481\u0026adbw=700\u0026adbah=153%2C153%2C153\u0026adbn=master-1\u0026eawp=partner-dp-bodis31_3ph\u0026errv=579967862\u0026csala=4%7C0%7C398%7C66%7C12\u0026lle=0\u0026ifv=1\u0026hpt=0 HTTP/1.1\r\nHost: www.adsensecustomsearchads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-eq8dTVLIHsbnngB56eGi9Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Mon, 04 Dec 2023 21:51:19 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: CONSENT=PENDING+913; expires=Wed, 03-Dec-2025 21:51:19 GMT; path=/; domain=.adsensecustomsearchads.com; Secure\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-06T20:09:47.269697Z","times_seen":16189918,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/adsense/domains/caf.js","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.164","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/","date":"2023-12-04T21:51:22.203Z","timestamp":1701726682203,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:24:57 GMT","end":"Mon, 15 Jan 2024 11:24:56 GMT"},"fingerprint":{"sha1":"B0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1","sha256":"8E:7A:F4:2A:73:D7:C2:C9:1E:EC:59:1E:76:11:A4:E4:8D:03:F6:64:60:A2:8A:86:33:52:6B:1D:FE:19:FA:8D"}}},"request":{"raw":"GET /adsense/domains/caf.js HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"ads-afs-ui\"\r\nreport-to: {\"group\":\"ads-afs-ui\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/ads-afs-ui\"}]}\r\ndate: Mon, 04 Dec 2023 21:51:16 GMT\r\nexpires: Mon, 04 Dec 2023 21:51:16 GMT\r\ncache-control: private, max-age=3600\r\netag: \"12169742205723775177\"\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://www.adsensecustomsearchads.com\u003e; rel=\"preconnect\"\r\ncontent-encoding: gzip\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":149633,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1888)","md5":"0808101bcc6e1191c5b6073e31bcb441","sha1":"325317ef7ae2592656dcabfb8462b40f3e3ebc08","sha256":"39359651a0d752d1e777094fd9deed5e4c5993ff6b2aebfd855761f41369b13e","sha512":"754751a2623e4528e0f4d33ca3ccef2262e4a72fd7d329eace58707fc6321adfafed64d8a25dd7af5b4c8f3afb391c5dc1e125ac1bd021fddb551604525508bc","ssdeep":"1536:grPOSj873QtAPyqqf/2uYgMjaitiKc1CPEU6i5QI+/F2R26i57VlcZ6gCzUIomHx:b2sAU5QI+t2RqB+Z+Umpa+NilYtN","tlshash":"97e35b9a7761302663a354f4603f028fb23ab959e84885f4f194d4e47cb8da91237fbd","first_seen":"2023-11-09T15:54:19Z","last_seen":"2023-12-13T16:25:25Z","times_seen":2531,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":59,"dns":2,"connect":8,"send":0,"wait":18,"receive":11,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff","fqdn":"afs.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.97","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://www.adsensecustomsearchads.com/afs/ads?adtest=off\u0026psid=3113057640\u0026pcsa=false\u0026channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol321%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol487\u0026client=dp-bodis31_3ph\u0026r=m\u0026hl=en\u0026rpbu=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%3Fcaf%26\u0026max_radlink_len=50\u0026type=3\u0026uiopt=false\u0026swp=as-drid-2439451366973938\u0026oe=UTF-8\u0026ie=UTF-8\u0026fexp=21404%2C17301383\u0026format=r3\u0026nocache=8751701726682472\u0026num=0\u0026output=afd_ads\u0026domain_name=ww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz\u0026v=3\u0026bsl=8\u0026pac=0\u0026u_his=2\u0026u_tz=0\u0026dt=1701726682473\u0026u_w=1280\u0026u_h=1024\u0026biw=1280\u0026bih=1024\u0026psw=1280\u0026psh=922\u0026frm=0\u0026cl=579967862\u0026uio=-\u0026cont=rs\u0026jsid=caf\u0026jsv=579967862\u0026rurl=http%3A%2F%2Fww25.zwl5hkjrwpgyjd5lr3zv.lspower.xyz%2F","date":"2023-12-04T21:51:22.988Z","timestamp":1701726682988,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Mon, 23 Oct 2023 11:23:50 GMT","end":"Mon, 15 Jan 2024 11:23:49 GMT"},"fingerprint":{"sha1":"2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE","sha256":"40:92:8E:18:42:CF:E7:31:DB:E9:39:E6:0B:C6:BC:AE:B4:2F:20:21:CC:80:C5:E8:5F:34:DE:01:85:5C:78:F1"}}},"request":{"raw":"GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1\r\nHost: afs.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.adsensecustomsearchads.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers\r\ncross-origin-opener-policy: same-origin; report-to=\"afs-native-asset-managers\"\r\nreport-to: {\"group\":\"afs-native-asset-managers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers\"}]}\r\ncontent-length: 278\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 04 Dec 2023 02:30:27 GMT\r\nexpires: Tue, 05 Dec 2023 01:30:27 GMT\r\ncache-control: public, max-age=82800\r\nage: 69650\r\nlast-modified: Tue, 27 Jun 2023 17:28:00 GMT\r\ncontent-type: image/svg+xml\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":444,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image\\012- , ASCII text, with very long lines (478), with no line terminators","md5":"e832f02dbacdfbc53f55ac03fd411536","sha1":"42faffc03967c9dddf015f2356b1ada381e85987","sha256":"bf7a2e0e38d5195c796b391534c7667bc936fc5a30ccfc410b45c53812efe264","sha512":"06797aecd71b2f9ba3007f6d458ba20a18ac74dcc410a15fde17fc8c9aaa612846c2da0e43dc5fffa18903cf3e6fa068aca72cf5375cbdb3db8b4bfbd984fa1f","ssdeep":"","tlshash":"fdf05cbcd285dc496e14d6027f7846a77267f4c572c6028eedc0583ad0305f83653ee4","first_seen":"2023-04-30T18:51:51Z","last_seen":"2025-04-06T22:11:27.327747Z","times_seen":4484,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":63,"dns":0,"connect":7,"send":0,"wait":9,"receive":1,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}