GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bjrgv9bwmwpv&cd_fexp=72717108&aqid=CQ-JaOyiJe3GhcIPpZOS0Qc&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=785442949&csala=11%7C0%7C468%7C110%7C254&lle=0&ifv=1&hpt=1
204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bjrgv9bwmwpv&cd_fexp=72717108&aqid=CQ-JaOyiJe3GhcIPpZOS0Qc&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=785442949&csala=11%7C0%7C468%7C110%7C254&lle=0&ifv=1&hpt=1
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D
ValidityMon, 07 Jul 2025 08:37:07 GMT - Mon, 29 Sep 2025 08:37:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bjrgv9bwmwpv&cd_fexp=72717108&aqid=CQ-JaOyiJe3GhcIPpZOS0Qc&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=785442949&csala=11%7C0%7C468%7C110%7C254&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-MndPvkW1Ea-e-j3qJN-hCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
date: Tue, 29 Jul 2025 18:12:27 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bb3i9yhzb2xq&cd_fexp=72717108&aqid=CQ-JaOyiJe3GhcIPpZOS0Qc&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=785442949&csala=11%7C0%7C468%7C110%7C254&lle=0&ifv=1&hpt=1
204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bb3i9yhzb2xq&cd_fexp=72717108&aqid=CQ-JaOyiJe3GhcIPpZOS0Qc&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=785442949&csala=11%7C0%7C468%7C110%7C254&lle=0&ifv=1&hpt=1
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D
ValidityMon, 07 Jul 2025 08:37:07 GMT - Mon, 29 Sep 2025 08:37:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=bb3i9yhzb2xq&cd_fexp=72717108&aqid=CQ-JaOyiJe3GhcIPpZOS0Qc&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=785442949&csala=11%7C0%7C468%7C110%7C254&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-rRC6GadGYf3E8gjYUG1c5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
date: Tue, 29 Jul 2025 18:12:27 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
POST obseu.youseasky.com/mon
200 OK 0 B IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1854
Origin: https://5ux3ev40.dacfsyvnz.es
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-type: application/json
date: Tue, 29 Jul 2025 18:12:41 GMT
content-length: 0
X-Firefox-Spdy: h2
GET 5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
200 OK 17 kB URL User Request GET 5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
IP
Certificate IssuerLet's Encrypt
Subject5ux3ev40.dacfsyvnz.es
Fingerprint24:57:1C:FA:40:9F:81:80:3D:53:A0:6C:DF:AF:50:84:88:D0:2D:20
ValiditySun, 20 Jul 2025 19:17:40 GMT - Sat, 18 Oct 2025 19:17:39 GMT
File type HTML document, ASCII text, with very long lines (9126)
Hash 5cea0ff1ccf4aa2fc2f93b38e50ca591
a416dbf32cd972714db18723620cca600b26cddc
62727e39182ed09a696a21d2c9338391a8813d1131aab0f954bbcce0e1117610
GET /HFUBR1@wCjI75/*will@slurpmail.net HTTP/1.1
Host: 5ux3ev40.dacfsyvnz.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50559"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Tue, 29 Jul 2025 18:12:24 GMT
server: nginx
vary: Accept-Encoding
via: 1.1 Caddy, 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LL4NKowhsfSIQpqNv9ypNU3D+kpsrB20DNIa2nQgmy75yMubGweLrbaTYIyrPNSbrz8def/DcCw8EX4yN5mCjg==
x-buckets: bucket102,bucket077
x-domain: dacfsyvnz.es
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: 5ux3ev40
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/adsense/domains/caf.js
200 OK 157 kB URL GET syndicatedsearch.goog/adsense/domains/caf.js
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.M_1PUaotltcZwISViJBOgbEmkXuO5jFYa9Z6yYQ9x_t3UDQ1NvOtLw.X2OsVy51IEz4XVvTFsnqIA.dpbBwGqScgJg3W_inTBfl19GRvY2dq5aV1B8rDg_-Y4GCh0daSDhdi1oQ1sMJYree-hW4Akb1S5bI4TlsdDzZf-go5w2EtOA4PIjo3bkObRwkjTw2byCa-lIlBnr0CWYvKL_i7uyqjboYWlCYfyT4GqYTZjAZmKNti4J3z4A2dcBJoR8BmLPdZn2NG_LFpfLta0E70JUzRddd5cv6crMQQrtmpYiHMrSfdH7gfaP5WXI2AUiwdh2DaFnimlzpV4UtigQExcHT8tYUhJBGeH1XGSaYUi-XC6RfCOr_3aeneUphDKR293FCazF3kPJ-wLwGFC2weM4kA7fy80M7CoEWkSdtKJvz-TJRqMGw8jMMi-tukuMwdaJHyVyEPRjnkk-S892oYIG0jNVbr5Pg34I2PXrTdnIHqKFWk5PQ97nQbKG4gtMCypbUun6MPGJUrmBvamGFDAiTINr1OHmbj7HWC-dHym3Q0ErqwIfCjjhmRGpebe4_3MT9iyrRVpG0wMz1lCX6obtViUWLHTYxA3aWoFxKXTlNQDPScgyBtgjM0Lh8BKcqi8LFwMc6qlVbLMdMAhweyeWgoX4o-2XOE3p0tCrVs3akCwUsQMjN2y7znKgPMpBIOEFzOe8ZSm5Af5E.5eBu9D1Dipb4gDyrG8ub6Q&max_radlink_len=40&type=3&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=2971753812745409&num=0&output=afd_ads&domain_name=5ux3ev40.dacfsyvnz.es&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1753812745410&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=785442949&rurl=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D
ValidityMon, 07 Jul 2025 08:37:07 GMT - Mon, 29 Sep 2025 08:37:06 GMT
File type JavaScript source, ASCII text, with very long lines (2943)
Size 157 kB (156925 bytes)
Hash da737e7415810544202dafc4c52482e3
6d23078abc19cbe582b43cb6e400e2d3fae77e64
49a96edec31ee455b522c69f6d92d14c8f6b3a9dd02da55ab88bcb7b6c7f697b
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 29 Jul 2025 18:12:25 GMT
expires: Tue, 29 Jul 2025 18:12:25 GMT
cache-control: private, max-age=3600
etag: "3587482480530000749"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
200 OK 11 kB URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Tue, 29 Jul 2025 05:29:30 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 dfa43a17d6715f83d8bb6aa560e80366.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: 1a34NNeEDFiHm9j2cyXZrmgpI1AeH2FdD85rPzm33cAPvWMEkgS1Rg==
age: 45775
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.M_1PUaotltcZwISViJBOgbEmkXuO5jFYa9Z6yYQ9x_t3UDQ1NvOtLw.X2OsVy51IEz4XVvTFsnqIA.dpbBwGqScgJg3W_inTBfl19GRvY2dq5aV1B8rDg_-Y4GCh0daSDhdi1oQ1sMJYree-hW4Akb1S5bI4TlsdDzZf-go5w2EtOA4PIjo3bkObRwkjTw2byCa-lIlBnr0CWYvKL_i7uyqjboYWlCYfyT4GqYTZjAZmKNti4J3z4A2dcBJoR8BmLPdZn2NG_LFpfLta0E70JUzRddd5cv6crMQQrtmpYiHMrSfdH7gfaP5WXI2AUiwdh2DaFnimlzpV4UtigQExcHT8tYUhJBGeH1XGSaYUi-XC6RfCOr_3aeneUphDKR293FCazF3kPJ-wLwGFC2weM4kA7fy80M7CoEWkSdtKJvz-TJRqMGw8jMMi-tukuMwdaJHyVyEPRjnkk-S892oYIG0jNVbr5Pg34I2PXrTdnIHqKFWk5PQ97nQbKG4gtMCypbUun6MPGJUrmBvamGFDAiTINr1OHmbj7HWC-dHym3Q0ErqwIfCjjhmRGpebe4_3MT9iyrRVpG0wMz1lCX6obtViUWLHTYxA3aWoFxKXTlNQDPScgyBtgjM0Lh8BKcqi8LFwMc6qlVbLMdMAhweyeWgoX4o-2XOE3p0tCrVs3akCwUsQMjN2y7znKgPMpBIOEFzOe8ZSm5Af5E.5eBu9D1Dipb4gDyrG8ub6Q&max_radlink_len=40&type=3&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=2971753812745409&num=0&output=afd_ads&domain_name=5ux3ev40.dacfsyvnz.es&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1753812745410&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=785442949&rurl=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net
200 OK 16 kB URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.M_1PUaotltcZwISViJBOgbEmkXuO5jFYa9Z6yYQ9x_t3UDQ1NvOtLw.X2OsVy51IEz4XVvTFsnqIA.dpbBwGqScgJg3W_inTBfl19GRvY2dq5aV1B8rDg_-Y4GCh0daSDhdi1oQ1sMJYree-hW4Akb1S5bI4TlsdDzZf-go5w2EtOA4PIjo3bkObRwkjTw2byCa-lIlBnr0CWYvKL_i7uyqjboYWlCYfyT4GqYTZjAZmKNti4J3z4A2dcBJoR8BmLPdZn2NG_LFpfLta0E70JUzRddd5cv6crMQQrtmpYiHMrSfdH7gfaP5WXI2AUiwdh2DaFnimlzpV4UtigQExcHT8tYUhJBGeH1XGSaYUi-XC6RfCOr_3aeneUphDKR293FCazF3kPJ-wLwGFC2weM4kA7fy80M7CoEWkSdtKJvz-TJRqMGw8jMMi-tukuMwdaJHyVyEPRjnkk-S892oYIG0jNVbr5Pg34I2PXrTdnIHqKFWk5PQ97nQbKG4gtMCypbUun6MPGJUrmBvamGFDAiTINr1OHmbj7HWC-dHym3Q0ErqwIfCjjhmRGpebe4_3MT9iyrRVpG0wMz1lCX6obtViUWLHTYxA3aWoFxKXTlNQDPScgyBtgjM0Lh8BKcqi8LFwMc6qlVbLMdMAhweyeWgoX4o-2XOE3p0tCrVs3akCwUsQMjN2y7znKgPMpBIOEFzOe8ZSm5Af5E.5eBu9D1Dipb4gDyrG8ub6Q&max_radlink_len=40&type=3&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=2971753812745409&num=0&output=afd_ads&domain_name=5ux3ev40.dacfsyvnz.es&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1753812745410&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=785442949&rurl=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint22:92:CD:9F:75:6A:23:71:D7:AF:2B:DB:BF:8F:B3:9E:37:15:38:6D
ValidityMon, 07 Jul 2025 08:37:07 GMT - Mon, 29 Sep 2025 08:37:06 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (15403)
Hash 2d02b01a0f533c72e52290cf3ac7962a
ba80262aa3c720d4e7fd07bdd40473650e4f8ca2
4a9a2eccb787fc54fe11986531e980178b6a47b8401a293431effa46e598414b
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.M_1PUaotltcZwISViJBOgbEmkXuO5jFYa9Z6yYQ9x_t3UDQ1NvOtLw.X2OsVy51IEz4XVvTFsnqIA.dpbBwGqScgJg3W_inTBfl19GRvY2dq5aV1B8rDg_-Y4GCh0daSDhdi1oQ1sMJYree-hW4Akb1S5bI4TlsdDzZf-go5w2EtOA4PIjo3bkObRwkjTw2byCa-lIlBnr0CWYvKL_i7uyqjboYWlCYfyT4GqYTZjAZmKNti4J3z4A2dcBJoR8BmLPdZn2NG_LFpfLta0E70JUzRddd5cv6crMQQrtmpYiHMrSfdH7gfaP5WXI2AUiwdh2DaFnimlzpV4UtigQExcHT8tYUhJBGeH1XGSaYUi-XC6RfCOr_3aeneUphDKR293FCazF3kPJ-wLwGFC2weM4kA7fy80M7CoEWkSdtKJvz-TJRqMGw8jMMi-tukuMwdaJHyVyEPRjnkk-S892oYIG0jNVbr5Pg34I2PXrTdnIHqKFWk5PQ97nQbKG4gtMCypbUun6MPGJUrmBvamGFDAiTINr1OHmbj7HWC-dHym3Q0ErqwIfCjjhmRGpebe4_3MT9iyrRVpG0wMz1lCX6obtViUWLHTYxA3aWoFxKXTlNQDPScgyBtgjM0Lh8BKcqi8LFwMc6qlVbLMdMAhweyeWgoX4o-2XOE3p0tCrVs3akCwUsQMjN2y7znKgPMpBIOEFzOe8ZSm5Af5E.5eBu9D1Dipb4gDyrG8ub6Q&max_radlink_len=40&type=3&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=2971753812745409&num=0&output=afd_ads&domain_name=5ux3ev40.dacfsyvnz.es&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1753812745410&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=785442949&rurl=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Tue, 29 Jul 2025 18:12:25 GMT
expires: Tue, 29 Jul 2025 18:12:25 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-4Hpq5XL9tKXRkVOZsIwVUA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
content-encoding: gzip
server: gws
content-length: 3669
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET obseu.youseasky.com/ct?id=80705&url=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=0f4b9b86ba480ff051782f7bcff9ae3591d6f854&tsf=0&tsfmi=&tsfu=&cb=1753812745934&hl=2&op=0&ag=3941171807&rand=0329228581218987101660298291970282518975226152660091256707920110980001211518013122976510&fs=1280x1024&fst=1280x1024&np=win32&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDkzNTZdLFsiYWJuY2giLDI0XSxbLTgsIi0iXSxbLTEyLCJcIjFcIiJdLFstMjAsIi0iXSxbLTU5LCItIl0sWy02NCwiLSJdLFstNjksIldpbjMyfHx8NDh8LXwtIl0sWy01MCwiLSJdLFstNTQsIntcImhcIjpbXCIzMjk5NzI4NDUyXCIsXCI4MjI4MjMxMTlcIixcIl8zXCIsXCIyNjM5MjIyNDY4XCJdLFwiZFwiOltdLFwiYlwiOltcIl8wXCIsXCIyNjQ2MDM4ODJcIl0sXCJzXCI6MX0iXSxbLTU4LCItIl0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjoxMTUsXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTQwLCIzNyJdLFstNTEsIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFFGWk1TbHhZU2xKQUYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhOQUFrTUZRNElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hRRlpNU2x4WVNsSkFGMXBXVkJaS1FVa1dVQllMQ3cxZkFRd0tDUXRZV0F0YkQxeGFDZ2xZV0ZvQVdBRU1YVmdMV2x0ZkFCZFRTZ01JQXc4TUNBa0lGVXBjVFcxUVZGeFdURTBaVVZoWFhWVmNTeE1PQ0FBV1RSZGNRVWxXUzAxS0ZnVjVVVTFOU1VvREZoWmNURlpiRjBCV1RFcGNXRXBTUUJkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2c9PSJdLFstNzMsIkVoUT0iXSxbLTIzLCIrIl0sWy0zMSwiZmFsc2UiXSxbLTU1LCIwIl0sWy0yMSwiLSJdLFstMzgsImksLTEsLTEsNjUsMCwyLDAsMyw1NSw2MSwtMSwwLCw1NDUsMTIyNiwxMjI1Il0sWy00NiwiMCJdLFstMSwiTGludXggeDg2XzY0Il0sWy02MCwiLSJdLFstNjcsIi0iXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy02MywiLSJdLFstMywiW1wiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiXSJdLFstNiwie1wid1wiOltcIjBcIixcInRjYmxvY2tcIixcInNlYXJjaGJveEJsb2NrXCIsXCJnZXRYTUxodHRwXCIsXCJhamF4UXVlcnlcIixcImFqYXhCYWNrZmlsbFwiLFwibG9hZEZlZWRcIixcInhtbEh0dHBcIixcImxzXCIsXCJnZXRMb2FkRmVlZEFyZ3VtZW50c1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwiX19jdGNnX2N0XzgwNzA1X2V4ZWNcIixcImdvb2dsZU5EVF9cIixcImdvb2dsZUFsdExvYWRlclwiLFwiZ29vZ2xlXCIsXCJfX3Nhc0Nvb2tpZVwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTY4LCItIl0sWy03MiwiRXhVPSJdLFstMzMsIi0iXSxbLTQ1LCI3NTIsMCwwLDcxOSwwLDAsNzYxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTQ5LCItIl0sWy01MywiMDAxIl0sWy02MSwiLSJdLFstMiwiMTYsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstNSwiLSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwwLDAsMCwwLFwiLVwiLFwiLVwiLDEyODAsMTAyNCxudWxsXSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTI3LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTQsIi0iXSxbLTcsIi0iXSxbLTcwLCItIl0sWy0yNiwiLSJdLFstMjksIi0iXSxbLTM3LCItIl0sWy00MSwiLSJdLFsiYm5jaCIsNzg3XSxbLTQyLCI4ODMzOTkwMTYiXSxbLTQ0LCIwLDUsMCw1Il0sWy01NiwibGFuZHNjYXBlLXByaW1hcnkiXSxbLTY1LCItIl0sWy05LCItIl0sWy03MSwiYTAxMDAxMDExMDAxMDAxMDEwMDAxMDEwMDExMDExMDAwMDAwMTAiXSxbLTEwLCItIl0sWy0xMywiLSJdLFstMTQsIi0iXSxbLTE2LCIwIl0sWy0zMiwiMCJdLFstMzQsIi0iXSxbLTUyLCItIl0sWy02MiwiNTgiXSxbLTc0LCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W119Il0sWy0xNSwiLSJdLFstMTcsIjQ4Il0sWy0yNCwiW10iXSxbLTI1LCItIl0sWy0zNSwiWzE3NTM4MTI3NDU4NzksMF0iXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDAxMTEwMDEwMDAwMDEwMDAwMDAwMDAwMCJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTY2LCItIl0sWyJkZGIiLCIwLDE1LDAsMiwyLDYsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMSwxLDAsMywwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMSwxLDYsMCwxLDAsMCwwLDEsMSw3LDY3LDAsNDAsMSwyLDAsMCwwLDEsMSwxLDExLDAsOCwwLDAsMCwwLDAsMCwwLDAsMSwwLDEyLDEsMiwxLDAsMCJdLFsiY2IiLCIwLDAsMCwxLDAsMCwwLDEsMCwxNywyMSwwLDExOSwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwyLDIsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMSwxLDAsMCwwLDEsMCwxLDAsMCwwLDEsMCJdXQ%3D%3D&dep=0&pre=0&sdd=&cri=a8ngQ6F74f&pto=1495&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1753812745.Ca1ZD0Y26lqsEPvR&suid=1.1753812745.Z1vN1cGhQYl8T2m7&tuid=1.1753812745.oDFEgsvvRbDyTvDN&fbc=->m=-&it=10%2C387%2C71&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
200 OK 3.6 kB URL GET obseu.youseasky.com/ct?id=80705&url=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=0f4b9b86ba480ff051782f7bcff9ae3591d6f854&tsf=0&tsfmi=&tsfu=&cb=1753812745934&hl=2&op=0&ag=3941171807&rand=0329228581218987101660298291970282518975226152660091256707920110980001211518013122976510&fs=1280x1024&fst=1280x1024&np=win32&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=a8ngQ6F74f&pto=1495&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1753812745.Ca1ZD0Y26lqsEPvR&suid=1.1753812745.Z1vN1cGhQYl8T2m7&tuid=1.1753812745.oDFEgsvvRbDyTvDN&fbc=->m=-&it=10%2C387%2C71&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3641), with no line terminators
Hash abcad16d356275f7eba22bde3c553c2f
d9550078b56c52a6992e08b60fb85eb7f79cd199
17c97ccbc102781af8a5ae4b9234cfe50066f6c4b31b3e837ff56e7c69951233
GET /ct?id=80705&url=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=0f4b9b86ba480ff051782f7bcff9ae3591d6f854&tsf=0&tsfmi=&tsfu=&cb=1753812745934&hl=2&op=0&ag=3941171807&rand=0329228581218987101660298291970282518975226152660091256707920110980001211518013122976510&fs=1280x1024&fst=1280x1024&np=win32&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDkzNTZdLFsiYWJuY2giLDI0XSxbLTgsIi0iXSxbLTEyLCJcIjFcIiJdLFstMjAsIi0iXSxbLTU5LCItIl0sWy02NCwiLSJdLFstNjksIldpbjMyfHx8NDh8LXwtIl0sWy01MCwiLSJdLFstNTQsIntcImhcIjpbXCIzMjk5NzI4NDUyXCIsXCI4MjI4MjMxMTlcIixcIl8zXCIsXCIyNjM5MjIyNDY4XCJdLFwiZFwiOltdLFwiYlwiOltcIl8wXCIsXCIyNjQ2MDM4ODJcIl0sXCJzXCI6MX0iXSxbLTU4LCItIl0sWzEyLCJ7XCJjdHhcIjpcIndlYmdsXCIsXCJ2XCI6XCJtZXNhXCIsXCJyXCI6XCJsbHZtcGlwZVwiLFwic2x2XCI6XCJ3ZWJnbCBnbHNsIGVzIDEuMFwiLFwiZ3ZlclwiOlwid2ViZ2wgMS4wXCIsXCJndmVuXCI6XCJtb3ppbGxhXCIsXCJiZW5cIjoxMTUsXCJ3Z2xcIjoxLFwiZ3JlblwiOlwibGx2bXBpcGVcIixcInNlZlwiOjQ5NDE5NTA0MyxcInNlY1wiOlwiXCJ9Il0sWy0zNiwiW1wiNS80XCIsXCI1LzRcIl0iXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTQwLCIzNyJdLFstNTEsIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFFGWk1TbHhZU2xKQUYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhOQUFrTUZRNElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hRRlpNU2x4WVNsSkFGMXBXVkJaS1FVa1dVQllMQ3cxZkFRd0tDUXRZV0F0YkQxeGFDZ2xZV0ZvQVdBRU1YVmdMV2x0ZkFCZFRTZ01JQXc4TUNBa0lGVXBjVFcxUVZGeFdURTBaVVZoWFhWVmNTeE1PQ0FBV1RSZGNRVWxXUzAxS0ZnVjVVVTFOU1VvREZoWmNURlpiRjBCV1RFcGNXRXBTUUJkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2c9PSJdLFstNzMsIkVoUT0iXSxbLTIzLCIrIl0sWy0zMSwiZmFsc2UiXSxbLTU1LCIwIl0sWy0yMSwiLSJdLFstMzgsImksLTEsLTEsNjUsMCwyLDAsMyw1NSw2MSwtMSwwLCw1NDUsMTIyNiwxMjI1Il0sWy00NiwiMCJdLFstMSwiTGludXggeDg2XzY0Il0sWy02MCwiLSJdLFstNjcsIi0iXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTQ4LCJbXCItXCIsXCItXCIsXCItXCIsXCItXCIsXCItXCJdIl0sWy02MywiLSJdLFstMywiW1wiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiLFwiaW50ZXJuYWwtcGRmLXZpZXdlclwiXSJdLFstNiwie1wid1wiOltcIjBcIixcInRjYmxvY2tcIixcInNlYXJjaGJveEJsb2NrXCIsXCJnZXRYTUxodHRwXCIsXCJhamF4UXVlcnlcIixcImFqYXhCYWNrZmlsbFwiLFwibG9hZEZlZWRcIixcInhtbEh0dHBcIixcImxzXCIsXCJnZXRMb2FkRmVlZEFyZ3VtZW50c1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwiX19jdGNnX2N0XzgwNzA1X2V4ZWNcIixcImdvb2dsZU5EVF9cIixcImdvb2dsZUFsdExvYWRlclwiLFwiZ29vZ2xlXCIsXCJfX3Nhc0Nvb2tpZVwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTY4LCItIl0sWy03MiwiRXhVPSJdLFstMzMsIi0iXSxbLTQ1LCI3NTIsMCwwLDcxOSwwLDAsNzYxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAiXSxbLTQ5LCItIl0sWy01MywiMDAxIl0sWy02MSwiLSJdLFstMiwiMTYsSXNOOW5HbldiQVlBSXhOZlFhT3FHRTBDRkFRc2NHMDBJbmhPYllCQUtZVU96UU82RVgwMjBJbUdMY3U2MnVyZFAvYzJkMnBObVZaQXdmMy8vOHo3OUdySGExV3UzT21YUFB2ZSJdLFstNSwiLSJdLFstMTksIlswLDAsMCwwLDAsMCwxLDI0LDI0LFwiLVwiLDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDEyODAsMTAyNCwwLDAsMCwwLFwiLVwiLFwiLVwiLDEyODAsMTAyNCxudWxsXSJdLFstMjIsIltcIm5cIixcIm5cIl0iXSxbLTI3LCItIl0sWy0yOCwiZW4tVVMsZW4iXSxbLTQsIi0iXSxbLTcsIi0iXSxbLTcwLCItIl0sWy0yNiwiLSJdLFstMjksIi0iXSxbLTM3LCItIl0sWy00MSwiLSJdLFsiYm5jaCIsNzg3XSxbLTQyLCI4ODMzOTkwMTYiXSxbLTQ0LCIwLDUsMCw1Il0sWy01NiwibGFuZHNjYXBlLXByaW1hcnkiXSxbLTY1LCItIl0sWy05LCItIl0sWy03MSwiYTAxMDAxMDExMDAxMDAxMDEwMDAxMDEwMDExMDExMDAwMDAwMTAiXSxbLTEwLCItIl0sWy0xMywiLSJdLFstMTQsIi0iXSxbLTE2LCIwIl0sWy0zMiwiMCJdLFstMzQsIi0iXSxbLTUyLCItIl0sWy02MiwiNTgiXSxbLTc0LCItIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W119Il0sWy0xNSwiLSJdLFstMTcsIjQ4Il0sWy0yNCwiW10iXSxbLTI1LCItIl0sWy0zNSwiWzE3NTM4MTI3NDU4NzksMF0iXSxbLTQzLCIwMDAwMDAwMTAwMDAwMDAwMDAxMTEwMDEwMDAwMDEwMDAwMDAwMDAwMCJdLFstNDcsIlVUQyxlbi1VUyxsYXRuLGdyZWdvcnkiXSxbLTY2LCItIl0sWyJkZGIiLCIwLDE1LDAsMiwyLDYsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMSwxLDAsMywwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMSwxLDYsMCwxLDAsMCwwLDEsMSw3LDY3LDAsNDAsMSwyLDAsMCwwLDEsMSwxLDExLDAsOCwwLDAsMCwwLDAsMCwwLDAsMSwwLDEyLDEsMiwxLDAsMCJdLFsiY2IiLCIwLDAsMCwxLDAsMCwwLDEsMCwxNywyMSwwLDExOSwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwxLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwyLDIsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDAsMSwxLDAsMCwwLDEsMCwxLDAsMCwwLDEsMCJdXQ%3D%3D&dep=0&pre=0&sdd=&cri=a8ngQ6F74f&pto=1495&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1753812745.Ca1ZD0Y26lqsEPvR&suid=1.1753812745.Z1vN1cGhQYl8T2m7&tuid=1.1753812745.oDFEgsvvRbDyTvDN&fbc=->m=-&it=10%2C387%2C71&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Tue, 29 Jul 2025 18:12:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb; Max-Age=29030400; Path=/; Expires=Tue, 30 Jun 2026 18:12:26 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-length: 1241
X-Firefox-Spdy: h2
GET 5ux3ev40.dacfsyvnz.es/munin/a/tr/answercheck/yes?domain=dacfsyvnz.es&caf=1&toggle=answercheck&answer=yes&uid=MTc1MzgxMjc0NC41OTA1OjhiMzVhZmVjNGJhOTJlYTY0N2I2NzIwOTdmNGE2ZDllMzdmNDM1NjdmODExOWQxMmNkZWMzZDRkY2I2Njc3ODE6Njg4OTBmMDg5MDI4Mw%3D%3D
200 OK 0 B URL GET 5ux3ev40.dacfsyvnz.es/munin/a/tr/answercheck/yes?domain=dacfsyvnz.es&caf=1&toggle=answercheck&answer=yes&uid=MTc1MzgxMjc0NC41OTA1OjhiMzVhZmVjNGJhOTJlYTY0N2I2NzIwOTdmNGE2ZDllMzdmNDM1NjdmODExOWQxMmNkZWMzZDRkY2I2Njc3ODE6Njg4OTBmMDg5MDI4Mw%3D%3D
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerLet's Encrypt
Subject5ux3ev40.dacfsyvnz.es
Fingerprint24:57:1C:FA:40:9F:81:80:3D:53:A0:6C:DF:AF:50:84:88:D0:2D:20
ValiditySun, 20 Jul 2025 19:17:40 GMT - Sat, 18 Oct 2025 19:17:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/answercheck/yes?domain=dacfsyvnz.es&caf=1&toggle=answercheck&answer=yes&uid=MTc1MzgxMjc0NC41OTA1OjhiMzVhZmVjNGJhOTJlYTY0N2I2NzIwOTdmNGE2ZDllMzdmNDM1NjdmODExOWQxMmNkZWMzZDRkY2I2Njc3ODE6Njg4OTBmMDg5MDI4Mw%3D%3D HTTP/1.1
Host: 5ux3ev40.dacfsyvnz.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Cookie: _cq_duid=1.1753812745.Ca1ZD0Y26lqsEPvR; _cq_suid=1.1753812745.Z1vN1cGhQYl8T2m7
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50559"; ma=2592000
content-type: text/html; charset=UTF-8
date: Tue, 29 Jul 2025 18:12:26 GMT
server: nginx
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
200 OK 200 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.M_1PUaotltcZwISViJBOgbEmkXuO5jFYa9Z6yYQ9x_t3UDQ1NvOtLw.X2OsVy51IEz4XVvTFsnqIA.dpbBwGqScgJg3W_inTBfl19GRvY2dq5aV1B8rDg_-Y4GCh0daSDhdi1oQ1sMJYree-hW4Akb1S5bI4TlsdDzZf-go5w2EtOA4PIjo3bkObRwkjTw2byCa-lIlBnr0CWYvKL_i7uyqjboYWlCYfyT4GqYTZjAZmKNti4J3z4A2dcBJoR8BmLPdZn2NG_LFpfLta0E70JUzRddd5cv6crMQQrtmpYiHMrSfdH7gfaP5WXI2AUiwdh2DaFnimlzpV4UtigQExcHT8tYUhJBGeH1XGSaYUi-XC6RfCOr_3aeneUphDKR293FCazF3kPJ-wLwGFC2weM4kA7fy80M7CoEWkSdtKJvz-TJRqMGw8jMMi-tukuMwdaJHyVyEPRjnkk-S892oYIG0jNVbr5Pg34I2PXrTdnIHqKFWk5PQ97nQbKG4gtMCypbUun6MPGJUrmBvamGFDAiTINr1OHmbj7HWC-dHym3Q0ErqwIfCjjhmRGpebe4_3MT9iyrRVpG0wMz1lCX6obtViUWLHTYxA3aWoFxKXTlNQDPScgyBtgjM0Lh8BKcqi8LFwMc6qlVbLMdMAhweyeWgoX4o-2XOE3p0tCrVs3akCwUsQMjN2y7znKgPMpBIOEFzOe8ZSm5Af5E.5eBu9D1Dipb4gDyrG8ub6Q&max_radlink_len=40&type=3&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=2971753812745409&num=0&output=afd_ads&domain_name=5ux3ev40.dacfsyvnz.es&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1753812745410&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=785442949&rurl=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint63:78:72:6F:FA:74:62:BB:8E:62:97:12:1D:27:37:96:37:81:92:E4
ValidityMon, 07 Jul 2025 08:35:06 GMT - Mon, 29 Sep 2025 08:35:05 GMT
File type SVG Scalable Vector Graphics image
Hash 11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Jul 2025 17:11:18 GMT
expires: Wed, 30 Jul 2025 16:11:18 GMT
cache-control: public, max-age=82800
age: 3668
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
200 OK 391 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket102%2Cbucket077&client=dp-teaminternet09_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.M_1PUaotltcZwISViJBOgbEmkXuO5jFYa9Z6yYQ9x_t3UDQ1NvOtLw.X2OsVy51IEz4XVvTFsnqIA.dpbBwGqScgJg3W_inTBfl19GRvY2dq5aV1B8rDg_-Y4GCh0daSDhdi1oQ1sMJYree-hW4Akb1S5bI4TlsdDzZf-go5w2EtOA4PIjo3bkObRwkjTw2byCa-lIlBnr0CWYvKL_i7uyqjboYWlCYfyT4GqYTZjAZmKNti4J3z4A2dcBJoR8BmLPdZn2NG_LFpfLta0E70JUzRddd5cv6crMQQrtmpYiHMrSfdH7gfaP5WXI2AUiwdh2DaFnimlzpV4UtigQExcHT8tYUhJBGeH1XGSaYUi-XC6RfCOr_3aeneUphDKR293FCazF3kPJ-wLwGFC2weM4kA7fy80M7CoEWkSdtKJvz-TJRqMGw8jMMi-tukuMwdaJHyVyEPRjnkk-S892oYIG0jNVbr5Pg34I2PXrTdnIHqKFWk5PQ97nQbKG4gtMCypbUun6MPGJUrmBvamGFDAiTINr1OHmbj7HWC-dHym3Q0ErqwIfCjjhmRGpebe4_3MT9iyrRVpG0wMz1lCX6obtViUWLHTYxA3aWoFxKXTlNQDPScgyBtgjM0Lh8BKcqi8LFwMc6qlVbLMdMAhweyeWgoX4o-2XOE3p0tCrVs3akCwUsQMjN2y7znKgPMpBIOEFzOe8ZSm5Af5E.5eBu9D1Dipb4gDyrG8ub6Q&max_radlink_len=40&type=3&swp=as-drid-2686859764326195&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=2971753812745409&num=0&output=afd_ads&domain_name=5ux3ev40.dacfsyvnz.es&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1753812745410&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=785442949&rurl=https%3A%2F%2F5ux3ev40.dacfsyvnz.es%2FHFUBR1%40wCjI75%2F*will%40slurpmail.net
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
Fingerprint63:78:72:6F:FA:74:62:BB:8E:62:97:12:1D:27:37:96:37:81:92:E4
ValidityMon, 07 Jul 2025 08:35:06 GMT - Mon, 29 Sep 2025 08:35:05 GMT
File type SVG Scalable Vector Graphics image
Hash 8959ddcd9712196961d93f58064ed655
62ab1e38e7e9fbf58a04381b76c2d96a9c829f24
17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Jul 2025 16:58:43 GMT
expires: Wed, 30 Jul 2025 15:58:43 GMT
cache-control: public, max-age=82800
age: 4423
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
200 OK 116 kB URL GET euob.youseasky.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerAmazon
Subject*.youseasky.com
FingerprintF4:E4:C6:70:2D:8F:86:68:CF:5D:7A:6C:62:4B:B8:0B:CC:F2:4A:30
ValiditySun, 18 May 2025 00:00:00 GMT - Tue, 16 Jun 2026 23:59:59 GMT
Size 116 kB (115721 bytes)
Hash f18c3f180181edec160ccf26f82233a6
71b1de82dde358136d55f33e8e62f453b6bf300a
e8120cab2fe57a9f2fe34fd7eafe74fa2c1ed656a27c1105b2b8d5413e3ec996
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 42449
content-encoding: gzip
server: Caddy
date: Tue, 29 Jul 2025 17:28:11 GMT
cache-control: max-age=43200
expires: Wed, 30 Jul 2025 05:27:38 GMT
etag: "1c409-cbHegt3jWBNtVfM+jmL0U7a/MAo"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 e6220bd7bee9300eb5b87a282645e6ec.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: TGUVQCl3e9mRyiwInEIGrSXzAdWtLtWYR2r4uuW9JK5Y-IkcmESmVw==
age: 2686
X-Firefox-Spdy: h2
GET 5ux3ev40.dacfsyvnz.es/munin/a/ls?t=68890f08&token=0f4b9b86ba480ff051782f7bcff9ae3591d6f854
201 Created 0 B URL GET 5ux3ev40.dacfsyvnz.es/munin/a/ls?t=68890f08&token=0f4b9b86ba480ff051782f7bcff9ae3591d6f854
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerLet's Encrypt
Subject5ux3ev40.dacfsyvnz.es
Fingerprint24:57:1C:FA:40:9F:81:80:3D:53:A0:6C:DF:AF:50:84:88:D0:2D:20
ValiditySun, 20 Jul 2025 19:17:40 GMT - Sat, 18 Oct 2025 19:17:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=68890f08&token=0f4b9b86ba480ff051782f7bcff9ae3591d6f854 HTTP/1.1
Host: 5ux3ev40.dacfsyvnz.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
alt-svc: h3=":50559"; ma=2592000
date: Tue, 29 Jul 2025 18:12:25 GMT
server: nginx
via: 1.1 Caddy
x-log-success: 68890f09cfb5d44fa7b5845e
content-length: 0
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2617
Origin: https://5ux3ev40.dacfsyvnz.es
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-type: application/json
date: Tue, 29 Jul 2025 18:12:27 GMT
content-length: 0
X-Firefox-Spdy: h2
GET 5ux3ev40.dacfsyvnz.es/munin/a/tr/browserjs?domain=dacfsyvnz.es&toggle=browserjs&uid=MTc1MzgxMjc0NC41OTA1OjhiMzVhZmVjNGJhOTJlYTY0N2I2NzIwOTdmNGE2ZDllMzdmNDM1NjdmODExOWQxMmNkZWMzZDRkY2I2Njc3ODE6Njg4OTBmMDg5MDI4Mw%3D%3D
200 OK 0 B URL GET 5ux3ev40.dacfsyvnz.es/munin/a/tr/browserjs?domain=dacfsyvnz.es&toggle=browserjs&uid=MTc1MzgxMjc0NC41OTA1OjhiMzVhZmVjNGJhOTJlYTY0N2I2NzIwOTdmNGE2ZDllMzdmNDM1NjdmODExOWQxMmNkZWMzZDRkY2I2Njc3ODE6Njg4OTBmMDg5MDI4Mw%3D%3D
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerLet's Encrypt
Subject5ux3ev40.dacfsyvnz.es
Fingerprint24:57:1C:FA:40:9F:81:80:3D:53:A0:6C:DF:AF:50:84:88:D0:2D:20
ValiditySun, 20 Jul 2025 19:17:40 GMT - Sat, 18 Oct 2025 19:17:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=dacfsyvnz.es&toggle=browserjs&uid=MTc1MzgxMjc0NC41OTA1OjhiMzVhZmVjNGJhOTJlYTY0N2I2NzIwOTdmNGE2ZDllMzdmNDM1NjdmODExOWQxMmNkZWMzZDRkY2I2Njc3ODE6Njg4OTBmMDg5MDI4Mw%3D%3D HTTP/1.1
Host: 5ux3ev40.dacfsyvnz.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50559"; ma=2592000
content-type: text/html; charset=UTF-8
date: Tue, 29 Jul 2025 18:12:24 GMT
server: nginx
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1851
Origin: https://5ux3ev40.dacfsyvnz.es
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-type: application/json
date: Tue, 29 Jul 2025 18:12:31 GMT
content-length: 0
X-Firefox-Spdy: h2
GET obseu.youseasky.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126fedcf34e8408e9b9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f674e8585df567e3e1cf62b2101d13cdd6094033205769207015a32075dc2bf391d77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db3870f29de3ad33e46daf40d612f04a6f73a0c7402c6821069a67899c19f00535f983c77b0f2f7489ce31218884421e385863455ee69c26722b01a2f91b7b84faf329c2e35226487af8f2f3979b74bbda8f5fbd56990c3a62dff488eba3269adfe56a943b12c3bc8b700a1ce5392becd0576ef1c7fe31c705aa00b68406961e98993c8d7e6bdc87729b7ae8a48d81edee935e59ac56b1bee533166de08f13d3e807f1051b508e0144db8595888fbc8337887283d0f5987fed6d7638c42078c6c6c31c6990e933f341cbbe0dd837af3d1a1b1a8c21bc4d8491e03fa8803cc00cf788cc9b3fce190a2dfc54540b3e6a78d68a64ba4e9683c522a89166f69c6e95c0e7fd7189bbeb5a747d8dee1e0a9bbb0a4e09f1eff43ffb6488e04eb1f232a02bf142c90a814a93d168d51035f9bc8e74696d135f735e0253d3b59e66c01fa5595c0175eabe24de98180cfea4debabc6ecaf1e5fc86fbaded4a4f3cf84f9ab2457382416d07ca60557670eb78a97205dfedc363967dd0258fb731cab90c85660820241e61159cc1f8c63a7b51f70457c19680efa2c0410480b1ba7895c77279dfd617221aa890b32221de258303de59965fdd70c9d401bbff6bb68982c0995963e8e5386b8374a189b5b57c9d2a4a1756e3302239edab3b8db113d885898c1194d395391c3659bf3aae06a254b0866d932c1c55374f2a3ca71cecd3471cdd29b4d9e729cb8d0dda6679c47c603eddac881850ee6de7da419e564d5f19ed7f75ddf1b53d9c0e61c49719a3c3cfabd500c857542215f2773940dccd5d4eb03dfbec8170da91fe045c7ca26a2014168f4a12f493ee0403cf212282858d41d5c6e58c0a77f822b11a6b54c45231209683465381d7e3d6e2b513fd28ff388037cb8e1ed6bcbb393dea8643c29aa2a086b78f8b2648d2a37909872dcb49e41e93b874fb94948b26a08c83a9a7052ed9&cri=a8ngQ6F74f&ts=359&cb=1753812746293
200 OK 43 B URL GET obseu.youseasky.com/tracker/tc_imp.gif?e=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&cri=a8ngQ6F74f&ts=359&cb=1753812746293
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=a8ngQ6F74f&ts=359&cb=1753812746293 HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Tue, 29 Jul 2025 18:12:26 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1851
Origin: https://5ux3ev40.dacfsyvnz.es
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-type: application/json
date: Tue, 29 Jul 2025 18:12:29 GMT
content-length: 0
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1854
Origin: https://5ux3ev40.dacfsyvnz.es
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-type: application/json
date: Tue, 29 Jul 2025 18:12:36 GMT
content-length: 0
X-Firefox-Spdy: h2
POST obseu.youseasky.com/mon
200 OK 0 B IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerZeroSSL
Subject*.youseasky.com
Fingerprint8D:AA:00:E1:90:E8:D3:F6:92:1B:91:14:B1:97:FC:21:E4:51:04:AC
ValiditySun, 06 Jul 2025 00:00:00 GMT - Sat, 04 Oct 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1854
Origin: https://5ux3ev40.dacfsyvnz.es
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Cookie: cg_uuid=776fab178cf5f722c720e1e1573241bb
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://5ux3ev40.dacfsyvnz.es
content-type: application/json
date: Tue, 29 Jul 2025 18:12:56 GMT
content-length: 0
X-Firefox-Spdy: h2
GET 5ux3ev40.dacfsyvnz.es/favicon.ico
200 OK 0 B URL GET 5ux3ev40.dacfsyvnz.es/favicon.ico
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerLet's Encrypt
Subject5ux3ev40.dacfsyvnz.es
Fingerprint24:57:1C:FA:40:9F:81:80:3D:53:A0:6C:DF:AF:50:84:88:D0:2D:20
ValiditySun, 20 Jul 2025 19:17:40 GMT - Sat, 18 Oct 2025 19:17:39 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: 5ux3ev40.dacfsyvnz.es
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50559"; ma=2592000
content-type: image/x-icon
date: Tue, 29 Jul 2025 18:12:25 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: nginx
via: 1.1 Caddy
content-length: 0
X-Firefox-Spdy: h2
GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
200 OK 157 kB URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
IP
Requested by https://5ux3ev40.dacfsyvnz.es/HFUBR1@wCjI75/*will@slurpmail.net
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
FingerprintF3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5
ValidityMon, 07 Jul 2025 08:35:54 GMT - Mon, 29 Sep 2025 08:35:53 GMT
File type JavaScript source, ASCII text, with very long lines (2943)
Size 157 kB (156918 bytes)
Hash af7fe58dbc493b6a0e57f9237ebc11cc
e69dcedf4cbfb49370dd854443c364cabfa1a6d8
0206a1d3608ad2e67c13af5b6e5434b5e10f608c763e36d54d05a6de328d1dca
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Android; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5ux3ev40.dacfsyvnz.es/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Tue, 29 Jul 2025 18:12:25 GMT
expires: Tue, 29 Jul 2025 18:12:25 GMT
cache-control: private, max-age=3600
etag: "214288480326662432"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
15.197.130.221
54.75.69.192