GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=j1ovbong8tn9&cd_fexp=72717108&aqid=Bt9MaMbEKN2ijuwPhuKwqQQ&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=769154410&csala=10%7C0%7C405%7C119%7C195&lle=0&ifv=1&hpt=1
216.58.207.238204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=j1ovbong8tn9&cd_fexp=72717108&aqid=Bt9MaMbEKN2ijuwPhuKwqQQ&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=769154410&csala=10%7C0%7C405%7C119%7C195&lle=0&ifv=1&hpt=1
IP 216.58.207.238:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC
ValidityMon, 19 May 2025 08:44:55 GMT - Mon, 11 Aug 2025 08:44:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=j1ovbong8tn9&cd_fexp=72717108&aqid=Bt9MaMbEKN2ijuwPhuKwqQQ&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=769154410&csala=10%7C0%7C405%7C119%7C195&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ETFwjEVsDXZey__iLHMo_Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 14 Jun 2025 02:31:36 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET xn--ggr907a28i3pb.cc/
75.2.18.233200 OK 19 kB IP 75.2.18.233:443
Certificate IssuerLet's Encrypt
Subjectxn--ggr907a28i3pb.cc
Fingerprint14:CF:16:35:C2:58:9C:31:A9:BA:FE:DE:40:50:F6:93:C6:52:5D:17
ValidityMon, 26 May 2025 04:39:22 GMT - Sun, 24 Aug 2025 04:39:21 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (9206)
Hash 1267a7e34c88fdef36ff382e1a824532
fce6466b0ab9959d623504e47096426e1676f7aa
1ca549f979a0ace5d1acbe4ff133bfcb1e607c91fc30e733d12976b657d6056c
GET / HTTP/1.1
Host: xn--ggr907a28i3pb.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50545"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 14 Jun 2025 02:31:33 GMT
server: Caddy, nginx
vary: Accept-Encoding
via: 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TnwHXcCGtpFmyJV3RH87x0QCcGAcD2+whEpfTDNty8Jx23jTjxOKVZSfN51YOIhzCOcroSBgrC0ou7+KwNjLcQ==
x-buckets: bucket003,bucket077
x-domain: xn--ggr907a28i3pb.cc
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain:
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
GET xn--ggr907a28i3pb.cc/munin/a/tr/browserjs?domain=xn--ggr907a28i3pb.cc&toggle=browserjs&uid=MTc0OTg2ODI5My40OTczOmIyZDk4ZjAxZjg1MzBmNDVmNTEwNzYyNmIxNWQwMGRmMjZiZmJjMDhlNDZlNjBkMzllNmI2MTcwMTUxMWJjMmM6Njg0Y2RmMDU3OTY4Yw%3D%3D
75.2.18.233200 OK 0 B URL GET xn--ggr907a28i3pb.cc/munin/a/tr/browserjs?domain=xn--ggr907a28i3pb.cc&toggle=browserjs&uid=MTc0OTg2ODI5My40OTczOmIyZDk4ZjAxZjg1MzBmNDVmNTEwNzYyNmIxNWQwMGRmMjZiZmJjMDhlNDZlNjBkMzllNmI2MTcwMTUxMWJjMmM6Njg0Y2RmMDU3OTY4Yw%3D%3D
IP 75.2.18.233:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerLet's Encrypt
Subjectxn--ggr907a28i3pb.cc
Fingerprint14:CF:16:35:C2:58:9C:31:A9:BA:FE:DE:40:50:F6:93:C6:52:5D:17
ValidityMon, 26 May 2025 04:39:22 GMT - Sun, 24 Aug 2025 04:39:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=xn--ggr907a28i3pb.cc&toggle=browserjs&uid=MTc0OTg2ODI5My40OTczOmIyZDk4ZjAxZjg1MzBmNDVmNTEwNzYyNmIxNWQwMGRmMjZiZmJjMDhlNDZlNjBkMzllNmI2MTcwMTUxMWJjMmM6Njg0Y2RmMDU3OTY4Yw%3D%3D HTTP/1.1
Host: xn--ggr907a28i3pb.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50545"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sat, 14 Jun 2025 02:31:33 GMT
server: Caddy, nginx
via: 0.0 Caddy
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
142.250.74.68200 OK 144 kB URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
IP 142.250.74.68:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerGoogle Trust Services
Subjectwww.google.com
Fingerprint5F:D0:77:0B:35:28:63:FA:F1:E5:B7:91:23:84:B9:89:D3:5B:66:F3
ValidityMon, 19 May 2025 08:43:37 GMT - Mon, 11 Aug 2025 08:43:36 GMT
File type JavaScript source, ASCII text, with very long lines (1839)
Size 144 kB (143480 bytes)
Hash f12d2b2ce3c1be23233c33328b57f2dc
676c3a81be3570bff7726f8b181a95a2fb303c14
a327f94a710d29be1c2d791fff05081d5d0ace74b6a1cd56cbb8045bbd382862
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 14 Jun 2025 02:31:34 GMT
expires: Sat, 14 Jun 2025 02:31:34 GMT
cache-control: private, max-age=3600
etag: "16556136238608853828"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
142.250.74.33200 OK 200 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
IP 142.250.74.33:443
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.ANFhteC0ongHanOXJP1i_T73IbnR7_L5QExLIYt7chMoLC6SBIxIXQ.4zosgbNVTBpNtpPUEK7KHg.cQBQm40xx_hu14uo8xFI551towfWXfQTPedHX0PynUK5l8ix8kDold6Gb4J6Ku0P9OqD7HHDPeP8nbxe5ACJ9_EzEEQ3-HZ4xv68qfmb31s6hT0doUMy4zHd56rBWXIEZq_UT9K5Fgm7ATaPmcTtQK8UY2NcAtF0VOOIsn5zaotU29TDXtmTaRIzWTHILzMn00lFRrPaZRswPO8LVb9iYTNhII54ZJnd3L6Ee5br1gI0eT0N5NfsWuRkZNwS8RBpjQ_LMFdoWBK3VXBtLIDK5_eq2VLUIhDcbvtGZa0CLbwm0ikO3CJvb7emdThwcZeFNuAf3Cb8p9z4-sszM8ns92SVIDosx1z_VhHWeDni5xxEajosmTeAPGZn5se21zqsW9SJStYrvb5-Ujeo4dvY6I4QsHaNeWu0Hb3h-B0X3qax5-1h8tT4aCASDA4-WOeRSd5irZ3502Eq1YeWUKYSIHqmM9Le7FHo2npkhIpfdWdAAHO5TPbU9JExJJHQjEPT5H_xa2ENs80bIPNuyXCeIFaCr5hJO-vnW2jeRJKPPG4K7P6ZHFPYIFS8skYjnz7ITd35FdcyBzQRF2SaeL1MnYh-Ao1OES6nz5wEhB-ip3z5nGsCrdkZ8PdrzJTFuizO86qG9VYTgaXIq0vXoou_aA.t6r9sxPMny1ZsNtFQHYPqA&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=6551749868294462&num=0&output=afd_ads&domain_name=xn--ggr907a28i3pb.cc&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749868294465&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=769154410&rurl=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintE9:0E:20:FC:F1:A6:82:B1:76:B9:AF:FD:1E:CC:71:AE:B7:5E:8A:0D
ValidityMon, 19 May 2025 08:42:46 GMT - Mon, 11 Aug 2025 08:42:45 GMT
File type SVG Scalable Vector Graphics image
Hash 11b3089d616633ca6b73b57aa877eeb4
07632f63e06b30d9b63c97177d3a8122629bda9b
809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jun 2025 21:27:56 GMT
expires: Sat, 14 Jun 2025 20:27:56 GMT
cache-control: public, max-age=82800
age: 18219
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.ANFhteC0ongHanOXJP1i_T73IbnR7_L5QExLIYt7chMoLC6SBIxIXQ.4zosgbNVTBpNtpPUEK7KHg.cQBQm40xx_hu14uo8xFI551towfWXfQTPedHX0PynUK5l8ix8kDold6Gb4J6Ku0P9OqD7HHDPeP8nbxe5ACJ9_EzEEQ3-HZ4xv68qfmb31s6hT0doUMy4zHd56rBWXIEZq_UT9K5Fgm7ATaPmcTtQK8UY2NcAtF0VOOIsn5zaotU29TDXtmTaRIzWTHILzMn00lFRrPaZRswPO8LVb9iYTNhII54ZJnd3L6Ee5br1gI0eT0N5NfsWuRkZNwS8RBpjQ_LMFdoWBK3VXBtLIDK5_eq2VLUIhDcbvtGZa0CLbwm0ikO3CJvb7emdThwcZeFNuAf3Cb8p9z4-sszM8ns92SVIDosx1z_VhHWeDni5xxEajosmTeAPGZn5se21zqsW9SJStYrvb5-Ujeo4dvY6I4QsHaNeWu0Hb3h-B0X3qax5-1h8tT4aCASDA4-WOeRSd5irZ3502Eq1YeWUKYSIHqmM9Le7FHo2npkhIpfdWdAAHO5TPbU9JExJJHQjEPT5H_xa2ENs80bIPNuyXCeIFaCr5hJO-vnW2jeRJKPPG4K7P6ZHFPYIFS8skYjnz7ITd35FdcyBzQRF2SaeL1MnYh-Ao1OES6nz5wEhB-ip3z5nGsCrdkZ8PdrzJTFuizO86qG9VYTgaXIq0vXoou_aA.t6r9sxPMny1ZsNtFQHYPqA&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=6551749868294462&num=0&output=afd_ads&domain_name=xn--ggr907a28i3pb.cc&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749868294465&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=769154410&rurl=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F
216.58.207.238200 OK 16 kB URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.ANFhteC0ongHanOXJP1i_T73IbnR7_L5QExLIYt7chMoLC6SBIxIXQ.4zosgbNVTBpNtpPUEK7KHg.cQBQm40xx_hu14uo8xFI551towfWXfQTPedHX0PynUK5l8ix8kDold6Gb4J6Ku0P9OqD7HHDPeP8nbxe5ACJ9_EzEEQ3-HZ4xv68qfmb31s6hT0doUMy4zHd56rBWXIEZq_UT9K5Fgm7ATaPmcTtQK8UY2NcAtF0VOOIsn5zaotU29TDXtmTaRIzWTHILzMn00lFRrPaZRswPO8LVb9iYTNhII54ZJnd3L6Ee5br1gI0eT0N5NfsWuRkZNwS8RBpjQ_LMFdoWBK3VXBtLIDK5_eq2VLUIhDcbvtGZa0CLbwm0ikO3CJvb7emdThwcZeFNuAf3Cb8p9z4-sszM8ns92SVIDosx1z_VhHWeDni5xxEajosmTeAPGZn5se21zqsW9SJStYrvb5-Ujeo4dvY6I4QsHaNeWu0Hb3h-B0X3qax5-1h8tT4aCASDA4-WOeRSd5irZ3502Eq1YeWUKYSIHqmM9Le7FHo2npkhIpfdWdAAHO5TPbU9JExJJHQjEPT5H_xa2ENs80bIPNuyXCeIFaCr5hJO-vnW2jeRJKPPG4K7P6ZHFPYIFS8skYjnz7ITd35FdcyBzQRF2SaeL1MnYh-Ao1OES6nz5wEhB-ip3z5nGsCrdkZ8PdrzJTFuizO86qG9VYTgaXIq0vXoou_aA.t6r9sxPMny1ZsNtFQHYPqA&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=6551749868294462&num=0&output=afd_ads&domain_name=xn--ggr907a28i3pb.cc&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749868294465&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=769154410&rurl=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F
IP 216.58.207.238:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC
ValidityMon, 19 May 2025 08:44:55 GMT - Mon, 11 Aug 2025 08:44:54 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (15417)
Hash 1e57723aa0407ad640d11a7e3e3f18d4
b76c6b58d2c10b1409a03aa927fbe4382915325d
30b4449eab9a5c8f779e52c6f63f7395a80e172a23308f614c6a0fa33cf944a9
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.ANFhteC0ongHanOXJP1i_T73IbnR7_L5QExLIYt7chMoLC6SBIxIXQ.4zosgbNVTBpNtpPUEK7KHg.cQBQm40xx_hu14uo8xFI551towfWXfQTPedHX0PynUK5l8ix8kDold6Gb4J6Ku0P9OqD7HHDPeP8nbxe5ACJ9_EzEEQ3-HZ4xv68qfmb31s6hT0doUMy4zHd56rBWXIEZq_UT9K5Fgm7ATaPmcTtQK8UY2NcAtF0VOOIsn5zaotU29TDXtmTaRIzWTHILzMn00lFRrPaZRswPO8LVb9iYTNhII54ZJnd3L6Ee5br1gI0eT0N5NfsWuRkZNwS8RBpjQ_LMFdoWBK3VXBtLIDK5_eq2VLUIhDcbvtGZa0CLbwm0ikO3CJvb7emdThwcZeFNuAf3Cb8p9z4-sszM8ns92SVIDosx1z_VhHWeDni5xxEajosmTeAPGZn5se21zqsW9SJStYrvb5-Ujeo4dvY6I4QsHaNeWu0Hb3h-B0X3qax5-1h8tT4aCASDA4-WOeRSd5irZ3502Eq1YeWUKYSIHqmM9Le7FHo2npkhIpfdWdAAHO5TPbU9JExJJHQjEPT5H_xa2ENs80bIPNuyXCeIFaCr5hJO-vnW2jeRJKPPG4K7P6ZHFPYIFS8skYjnz7ITd35FdcyBzQRF2SaeL1MnYh-Ao1OES6nz5wEhB-ip3z5nGsCrdkZ8PdrzJTFuizO86qG9VYTgaXIq0vXoou_aA.t6r9sxPMny1ZsNtFQHYPqA&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=6551749868294462&num=0&output=afd_ads&domain_name=xn--ggr907a28i3pb.cc&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749868294465&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=769154410&rurl=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 14 Jun 2025 02:31:34 GMT
expires: Sat, 14 Jun 2025 02:31:34 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-2t_JzTQrfblYLfzXoMU0Ng' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3450
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST obseu.astarsbuilding.com/mon
34.251.101.162200 OK 0 B URL POST obseu.astarsbuilding.com/mon
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2479
Origin: https://xn--ggr907a28i3pb.cc
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: cg_uuid=b1122293106632f93188502a4c4f546e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://xn--ggr907a28i3pb.cc
content-type: application/json
date: Sat, 14 Jun 2025 02:31:36 GMT
content-length: 0
X-Firefox-Spdy: h2
POST obseu.astarsbuilding.com/mon
34.251.101.162200 OK 0 B URL POST obseu.astarsbuilding.com/mon
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1693
Origin: https://xn--ggr907a28i3pb.cc
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: cg_uuid=b1122293106632f93188502a4c4f546e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://xn--ggr907a28i3pb.cc
content-type: application/json
date: Sat, 14 Jun 2025 02:31:40 GMT
content-length: 0
X-Firefox-Spdy: h2
GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
54.240.174.18200 OK 112 kB URL GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js
IP 54.240.174.18:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerAmazon
Subject*.astarsbuilding.com
FingerprintAF:5D:7D:29:4F:F3:A2:2A:2D:40:A9:AC:24:CC:23:08:D0:B8:D1:57
ValidityTue, 20 May 2025 00:00:00 GMT - Thu, 18 Jun 2026 23:59:59 GMT
Size 112 kB (112494 bytes)
Hash 420f2bd10abfa01be89c2fa70db2140f
866f93f5059260eac652b9cb21d38bc61a28af6f
e7890637c6751a539ea0e346615951fb25beafb65b4b6f2b9e812d5eaec7ca2a
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 41298
content-encoding: gzip
server: Caddy
date: Fri, 13 Jun 2025 17:28:58 GMT
cache-control: max-age=43200
expires: Sat, 14 Jun 2025 05:28:47 GMT
etag: "1b76e-hm+T9QWSYOrGUrnLIdOLxhoor28"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: llOaiC_-a0bW0A_xAAC-kRF67-Trx4RoGrJl9tapkKnAqKDDjcyCXA==
age: 32566
X-Firefox-Spdy: h2
GET xn--ggr907a28i3pb.cc/munin/a/ls?t=684cdf05&token=868c0a8de006731e64b0a4e02a1ba88e0db4962a
75.2.18.233201 Created 0 B URL GET xn--ggr907a28i3pb.cc/munin/a/ls?t=684cdf05&token=868c0a8de006731e64b0a4e02a1ba88e0db4962a
IP 75.2.18.233:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerLet's Encrypt
Subjectxn--ggr907a28i3pb.cc
Fingerprint14:CF:16:35:C2:58:9C:31:A9:BA:FE:DE:40:50:F6:93:C6:52:5D:17
ValidityMon, 26 May 2025 04:39:22 GMT - Sun, 24 Aug 2025 04:39:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=684cdf05&token=868c0a8de006731e64b0a4e02a1ba88e0db4962a HTTP/1.1
Host: xn--ggr907a28i3pb.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50545"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Sat, 14 Jun 2025 02:31:33 GMT
server: Caddy, nginx
status: 201 Created
via: 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_W7m13FdmHnhjlCBXOoNG1LJWm4IMsdhlFB8yuFMT3YEOHdYntUECQalSiH/NcV4F+XVEArleNfybc7v8y+dcFg==
x-log-success: 684cdf05b8dc1e5e2009da61
content-length: 0
X-Firefox-Spdy: h2
GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
3.167.7.54200 OK 11 kB URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
IP 3.167.7.54:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerAmazon
Subject*.cloudfront.net
Fingerprint8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72
ValidityMon, 05 May 2025 00:00:00 GMT - Thu, 23 Apr 2026 23:59:59 GMT
File type PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Hash 0cb2e5165dc9324eb462199f04e1ffa9
9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8
67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Fri, 13 Jun 2025 11:05:19 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 ca0f77e7d535ced1a10fc8b8f87def9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: BZAz52z3wARTF-DwfGjzkFBqrOws0dv3P-YGcBCDL3d6cJw8EjpKow==
age: 55575
X-Firefox-Spdy: h2
GET xn--ggr907a28i3pb.cc/favicon.ico
75.2.18.233200 OK 0 B URL GET xn--ggr907a28i3pb.cc/favicon.ico
IP 75.2.18.233:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerLet's Encrypt
Subjectxn--ggr907a28i3pb.cc
Fingerprint14:CF:16:35:C2:58:9C:31:A9:BA:FE:DE:40:50:F6:93:C6:52:5D:17
ValidityMon, 26 May 2025 04:39:22 GMT - Sun, 24 Aug 2025 04:39:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: xn--ggr907a28i3pb.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50545"; ma=2592000
content-type: image/x-icon
date: Sat, 14 Jun 2025 02:31:34 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
POST obseu.astarsbuilding.com/mon
34.251.101.162200 OK 0 B URL POST obseu.astarsbuilding.com/mon
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1696
Origin: https://xn--ggr907a28i3pb.cc
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: cg_uuid=b1122293106632f93188502a4c4f546e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://xn--ggr907a28i3pb.cc
content-type: application/json
date: Sat, 14 Jun 2025 02:31:50 GMT
content-length: 0
X-Firefox-Spdy: h2
GET www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png
104.16.152.132200 OK 2.1 kB URL GET www.dynadot.com/tr/mainsite2023/navbar-logo-dark-2023.png
IP 104.16.152.132:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerGoogle Trust Services
Subjectdynadot.com
Fingerprint32:BB:AB:C4:14:C3:48:61:46:F8:0D:6B:9D:07:34:C0:25:7E:B0:BC
ValidityWed, 21 May 2025 19:16:33 GMT - Tue, 19 Aug 2025 20:16:30 GMT
File type RIFF (little-endian) data, Web/P image
Hash cc766ccddd8dd6d09592cf7bc61e98fa
6611f72d68360af6cd3948419672fb29ce995025
9e701ce71ca43fb9ee9f9abe1ee9f4399b1ab1007bad445d6a2429101300d67d
GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1
Host: www.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 14 Jun 2025 02:31:33 GMT
content-type: image/webp
content-length: 2132
cf-ray: 94f6698538c856a9-OSL
cache-control: public, max-age=1209600
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4843
content-disposition: inline; filename="navbar-logo-dark-2023.webp"
etag: 1749773417115
expires: Sat, 28 Jun 2025 02:31:33 GMT
strict-transport-security: max-age=2592000
vary: Accept
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 94853
accept-ranges: bytes
access-control-allow-origin: *.mouseflow.com
server: cloudflare
X-Firefox-Spdy: h2
GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
142.250.74.33200 OK 391 B URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
IP 142.250.74.33:443
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.ANFhteC0ongHanOXJP1i_T73IbnR7_L5QExLIYt7chMoLC6SBIxIXQ.4zosgbNVTBpNtpPUEK7KHg.cQBQm40xx_hu14uo8xFI551towfWXfQTPedHX0PynUK5l8ix8kDold6Gb4J6Ku0P9OqD7HHDPeP8nbxe5ACJ9_EzEEQ3-HZ4xv68qfmb31s6hT0doUMy4zHd56rBWXIEZq_UT9K5Fgm7ATaPmcTtQK8UY2NcAtF0VOOIsn5zaotU29TDXtmTaRIzWTHILzMn00lFRrPaZRswPO8LVb9iYTNhII54ZJnd3L6Ee5br1gI0eT0N5NfsWuRkZNwS8RBpjQ_LMFdoWBK3VXBtLIDK5_eq2VLUIhDcbvtGZa0CLbwm0ikO3CJvb7emdThwcZeFNuAf3Cb8p9z4-sszM8ns92SVIDosx1z_VhHWeDni5xxEajosmTeAPGZn5se21zqsW9SJStYrvb5-Ujeo4dvY6I4QsHaNeWu0Hb3h-B0X3qax5-1h8tT4aCASDA4-WOeRSd5irZ3502Eq1YeWUKYSIHqmM9Le7FHo2npkhIpfdWdAAHO5TPbU9JExJJHQjEPT5H_xa2ENs80bIPNuyXCeIFaCr5hJO-vnW2jeRJKPPG4K7P6ZHFPYIFS8skYjnz7ITd35FdcyBzQRF2SaeL1MnYh-Ao1OES6nz5wEhB-ip3z5nGsCrdkZ8PdrzJTFuizO86qG9VYTgaXIq0vXoou_aA.t6r9sxPMny1ZsNtFQHYPqA&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=6551749868294462&num=0&output=afd_ads&domain_name=xn--ggr907a28i3pb.cc&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749868294465&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=769154410&rurl=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F
Certificate IssuerGoogle Trust Services
Subject*.googleusercontent.com
FingerprintE9:0E:20:FC:F1:A6:82:B1:76:B9:AF:FD:1E:CC:71:AE:B7:5E:8A:0D
ValidityMon, 19 May 2025 08:42:46 GMT - Mon, 11 Aug 2025 08:42:45 GMT
File type SVG Scalable Vector Graphics image
Hash 8959ddcd9712196961d93f58064ed655
62ab1e38e7e9fbf58a04381b76c2d96a9c829f24
17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 13 Jun 2025 21:15:43 GMT
expires: Sat, 14 Jun 2025 20:15:43 GMT
cache-control: public, max-age=82800
age: 18952
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
POST obseu.astarsbuilding.com/mon
34.251.101.162200 OK 0 B URL POST obseu.astarsbuilding.com/mon
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1693
Origin: https://xn--ggr907a28i3pb.cc
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: cg_uuid=b1122293106632f93188502a4c4f546e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://xn--ggr907a28i3pb.cc
content-type: application/json
date: Sat, 14 Jun 2025 02:31:38 GMT
content-length: 0
X-Firefox-Spdy: h2
POST obseu.astarsbuilding.com/mon
34.251.101.162200 OK 0 B URL POST obseu.astarsbuilding.com/mon
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1696
Origin: https://xn--ggr907a28i3pb.cc
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: cg_uuid=b1122293106632f93188502a4c4f546e
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://xn--ggr907a28i3pb.cc
content-type: application/json
date: Sat, 14 Jun 2025 02:31:45 GMT
content-length: 0
X-Firefox-Spdy: h2
GET xn--ggr907a28i3pb.cc/munin/a/tr/answercheck/yes?domain=xn--ggr907a28i3pb.cc&caf=1&toggle=answercheck&answer=yes&uid=MTc0OTg2ODI5My40OTczOmIyZDk4ZjAxZjg1MzBmNDVmNTEwNzYyNmIxNWQwMGRmMjZiZmJjMDhlNDZlNjBkMzllNmI2MTcwMTUxMWJjMmM6Njg0Y2RmMDU3OTY4Yw%3D%3D
75.2.18.233200 OK 0 B URL GET xn--ggr907a28i3pb.cc/munin/a/tr/answercheck/yes?domain=xn--ggr907a28i3pb.cc&caf=1&toggle=answercheck&answer=yes&uid=MTc0OTg2ODI5My40OTczOmIyZDk4ZjAxZjg1MzBmNDVmNTEwNzYyNmIxNWQwMGRmMjZiZmJjMDhlNDZlNjBkMzllNmI2MTcwMTUxMWJjMmM6Njg0Y2RmMDU3OTY4Yw%3D%3D
IP 75.2.18.233:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerLet's Encrypt
Subjectxn--ggr907a28i3pb.cc
Fingerprint14:CF:16:35:C2:58:9C:31:A9:BA:FE:DE:40:50:F6:93:C6:52:5D:17
ValidityMon, 26 May 2025 04:39:22 GMT - Sun, 24 Aug 2025 04:39:21 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/answercheck/yes?domain=xn--ggr907a28i3pb.cc&caf=1&toggle=answercheck&answer=yes&uid=MTc0OTg2ODI5My40OTczOmIyZDk4ZjAxZjg1MzBmNDVmNTEwNzYyNmIxNWQwMGRmMjZiZmJjMDhlNDZlNjBkMzllNmI2MTcwMTUxMWJjMmM6Njg0Y2RmMDU3OTY4Yw%3D%3D HTTP/1.1
Host: xn--ggr907a28i3pb.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: _cq_duid=1.1749868294.pTn3LIbE3gYvXqAe; _cq_suid=1.1749868294.kM9fzmFIyyekXWxG
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50545"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sat, 14 Jun 2025 02:31:35 GMT
server: Caddy, nginx
via: 0.0 Caddy
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9xf1qrx564nk&cd_fexp=72717108&aqid=Bt9MaMbEKN2ijuwPhuKwqQQ&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=769154410&csala=10%7C0%7C405%7C119%7C195&lle=0&ifv=1&hpt=1
216.58.207.238204 No Content 0 B URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9xf1qrx564nk&cd_fexp=72717108&aqid=Bt9MaMbEKN2ijuwPhuKwqQQ&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=769154410&csala=10%7C0%7C405%7C119%7C195&lle=0&ifv=1&hpt=1
IP 216.58.207.238:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC
ValidityMon, 19 May 2025 08:44:55 GMT - Mon, 11 Aug 2025 08:44:54 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9xf1qrx564nk&cd_fexp=72717108&aqid=Bt9MaMbEKN2ijuwPhuKwqQQ&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=769154410&csala=10%7C0%7C405%7C119%7C195&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-b39EeidJrtAaPHf4bsfuUw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 14 Jun 2025 02:31:36 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET obseu.astarsbuilding.com/ct?id=80705&url=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=868c0a8de006731e64b0a4e02a1ba88e0db4962a&tsf=0&tsfmi=&tsfu=&cb=1749868294763&hl=2&op=0&ag=2881387774&rand=9387078068688706977750288808505118299060251052102621825285029000650680025589003616681169&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=L1b45zTwK6&pto=1521&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1749868294.pTn3LIbE3gYvXqAe&suid=1.1749868294.kM9fzmFIyyekXWxG&tuid=1.1749868294.NsYP4xFFja9ClDiC&fbc=->m=-&it=10%2C502%2C189&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
34.251.101.162200 OK 3.4 kB URL GET obseu.astarsbuilding.com/ct?id=80705&url=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=868c0a8de006731e64b0a4e02a1ba88e0db4962a&tsf=0&tsfmi=&tsfu=&cb=1749868294763&hl=2&op=0&ag=2881387774&rand=9387078068688706977750288808505118299060251052102621825285029000650680025589003616681169&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=L1b45zTwK6&pto=1521&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1749868294.pTn3LIbE3gYvXqAe&suid=1.1749868294.kM9fzmFIyyekXWxG&tuid=1.1749868294.NsYP4xFFja9ClDiC&fbc=->m=-&it=10%2C502%2C189&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
File type JavaScript source, ASCII text, with very long lines (3385), with no line terminators
Hash a4a75fbd89bf674d1b960a35708df4d7
2ead22a235751783c128962abbe1161147270e97
bae70a7a1ff3566d2e1b1beff390c2542d166a33069082aa3483bf358a94c8ad
GET /ct?id=80705&url=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=868c0a8de006731e64b0a4e02a1ba88e0db4962a&tsf=0&tsfmi=&tsfu=&cb=1749868294763&hl=2&op=0&ag=2881387774&rand=9387078068688706977750288808505118299060251052102621825285029000650680025589003616681169&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=L1b45zTwK6&pto=1521&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1749868294.pTn3LIbE3gYvXqAe&suid=1.1749868294.kM9fzmFIyyekXWxG&tuid=1.1749868294.NsYP4xFFja9ClDiC&fbc=->m=-&it=10%2C502%2C189&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sat, 14 Jun 2025 02:31:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=b1122293106632f93188502a4c4f546e; Max-Age=29030400; Path=/; Expires=Sat, 16 May 2026 02:31:35 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://xn--ggr907a28i3pb.cc
content-length: 1159
X-Firefox-Spdy: h2
GET syndicatedsearch.goog/adsense/domains/caf.js
216.58.207.238200 OK 144 kB URL GET syndicatedsearch.goog/adsense/domains/caf.js
IP 216.58.207.238:443
Requested by https://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.ANFhteC0ongHanOXJP1i_T73IbnR7_L5QExLIYt7chMoLC6SBIxIXQ.4zosgbNVTBpNtpPUEK7KHg.cQBQm40xx_hu14uo8xFI551towfWXfQTPedHX0PynUK5l8ix8kDold6Gb4J6Ku0P9OqD7HHDPeP8nbxe5ACJ9_EzEEQ3-HZ4xv68qfmb31s6hT0doUMy4zHd56rBWXIEZq_UT9K5Fgm7ATaPmcTtQK8UY2NcAtF0VOOIsn5zaotU29TDXtmTaRIzWTHILzMn00lFRrPaZRswPO8LVb9iYTNhII54ZJnd3L6Ee5br1gI0eT0N5NfsWuRkZNwS8RBpjQ_LMFdoWBK3VXBtLIDK5_eq2VLUIhDcbvtGZa0CLbwm0ikO3CJvb7emdThwcZeFNuAf3Cb8p9z4-sszM8ns92SVIDosx1z_VhHWeDni5xxEajosmTeAPGZn5se21zqsW9SJStYrvb5-Ujeo4dvY6I4QsHaNeWu0Hb3h-B0X3qax5-1h8tT4aCASDA4-WOeRSd5irZ3502Eq1YeWUKYSIHqmM9Le7FHo2npkhIpfdWdAAHO5TPbU9JExJJHQjEPT5H_xa2ENs80bIPNuyXCeIFaCr5hJO-vnW2jeRJKPPG4K7P6ZHFPYIFS8skYjnz7ITd35FdcyBzQRF2SaeL1MnYh-Ao1OES6nz5wEhB-ip3z5nGsCrdkZ8PdrzJTFuizO86qG9VYTgaXIq0vXoou_aA.t6r9sxPMny1ZsNtFQHYPqA&max_radlink_len=40&type=3&swp=as-drid-2997149969328928&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300003%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=6551749868294462&num=0&output=afd_ads&domain_name=xn--ggr907a28i3pb.cc&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1749868294465&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=769154410&rurl=https%3A%2F%2Fxn--ggr907a28i3pb.cc%2F
Certificate IssuerGoogle Trust Services
Subjectsyndicatedsearch.goog
Fingerprint5A:95:12:66:33:FA:EE:0C:D5:56:DA:6D:8E:83:4E:81:6C:78:B6:EC
ValidityMon, 19 May 2025 08:44:55 GMT - Mon, 11 Aug 2025 08:44:54 GMT
File type JavaScript source, ASCII text, with very long lines (1839)
Size 144 kB (143517 bytes)
Hash 80dd6593bdefd7444f9cf3427c5a070d
1cee49b7ee442363984420ec417ca3ff0cd2f408
c02cb6e5d76dcf7d5dee1c38e17008ef8b72dac2e98a89b5b56152c50ff2585a
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 14 Jun 2025 02:31:34 GMT
expires: Sat, 14 Jun 2025 02:31:34 GMT
cache-control: private, max-age=3600
etag: "10574505089316369326"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126ee7cf33e24583989225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f671b83828b052e3618ff7871028439896bc405380d269350515b660009c3ba6d1a77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2c41740f5fa2dd28602b03a4ab41288cf9fc2a90e608711424afa2a196ca21edcfc248b5038e523d65cceb92a9e471d280f061856b4a95b98a260709bf3f72b5c74326e7d8fc258d0ea645f2d606911cd4dd63d66c60849326c477d287b9b0d0b1f11329f72caaa9a93b5b26c2ac718ca610a14f441dc5180b97dad58681ec8234cf3ac099a5c820ae3c357485726bccd4b24836f6ef7da043a8d14b9b78ac764e091b8e38bc01dacca27aaa843dc05ca9cfd0d873855c477bf653181326097287e223b146f5c28c23a9884efbd0749acda9b03d8bb0c6516d7984ff75429bef491542baacf23ab630f1e95decfc2fb27ca0318952d414d5a020c61a27e7ac8e673f3f630b360f400aabe38470cf01bf42525e2afeb053c29e1a0ce2a5d8bbbd70dfeae5f89ae5a9f14a5321fd4782db457cd7063c4fc5694f7072f77cab7f11c4e3c36a8e7e9741d5a850b4ea789a2c666748430d468edcf69879220188125794cdd8bcb4c35b0396b2b47988940e728e984f4a10b0d88c0d49d06ff24d8308a77ac246c9c201f9a433e59f81da9e4f60e6e4251dc11fc689f8dd60c63d3d6559e0313042adb11dcfba06c0f2f6d4468fc3de2104375bac69fa41fb29edd238d26b1c7f236f2a26be049c8b3149ab3b95e5e73fdace4e906633f2406e269ef4c34a07bb33e78413db042d120ae1793e88afcb7a94146dcb9719a0c3cfa0c3118f1f472816f3743940c3d35f1ea836e7e2d374d986fe045c60b03b631a0eca1753e69df20a53d43b37c19dd9049588a6dd0061c370c95b350597177d28c7da5210d795b69b&cri=L1b45zTwK6&ts=319&cb=1749868295082
34.251.101.162200 OK 43 B URL GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=L1b45zTwK6&ts=319&cb=1749868295082
IP 34.251.101.162:443
Requested by https://xn--ggr907a28i3pb.cc/
Certificate IssuerZeroSSL
Subject*.astarsbuilding.com
FingerprintA8:EE:C7:E1:90:8D:10:87:90:BE:1E:05:12:40:C2:CE:3A:9A:F2:89
ValiditySat, 17 May 2025 00:00:00 GMT - Fri, 15 Aug 2025 23:59:59 GMT
File type GIF image data, version 89a, 1 x 1
Hash db04c7b378cb2db912c3ba8a5a774ee3
dee34bd86c3484d31002182aa2b7caa4699126b8
98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=L1b45zTwK6&ts=319&cb=1749868295082 HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://xn--ggr907a28i3pb.cc/
Cookie: cg_uuid=b1122293106632f93188502a4c4f546e
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 14 Jun 2025 02:31:35 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2