GET /munin/a/tr/browserjs?domain=urltiny.ru&toggle=browserjs&uid=MTczODQzNzAyMy45NDIzOjUyMTgxZTA3OTY1Nzk4MDcwOWY1NWFmMWE2YTJmYWI0ZGQ1YTMwNmQyOGUxZDg0ZWI1MWZmZWM2NzYxODcwMWU6Njc5ZTcxOWZlNjBiOA%3D%3D HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZScmsliH/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sat, 01 Feb 2025 19:10:24 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Sat, 01 Feb 2025 11:05:00 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -4GGT841ri6lkIp5dWHAWYbzcTBnYW2rE9MikEdLDjW4phfyJxMMMw==
age: 29124
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZScmsliH/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Sat, 01 Feb 2025 19:10:24 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2

GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1
Host: euob.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40030
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Sat, 01 Feb 2025 19:09:19 GMT
expires: Sun, 02 Feb 2025 07:09:19 GMT
etag: "1abea-hhqiRr1YIatnkfGdKKjUGlB9O+4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ru9CC8FlHT28V1SsAmGEJZC7WdcLNxgnnXXj-e0AfCcsq8noYI1auw==
age: 65
X-Firefox-Spdy: h2

GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.urltiny.ru%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc5ZTcxOWZlNjA5Ynx8fDE3Mzg0MzcwMjMuOTY2OHw1YmUwNWE3NjM0M2Q4NzM1Yjg0ZjViYWFmY2MxNDY4ZDlhZmVhZWM4fHx8fHwxfHwwfDB8fHx8MXx8fHx8MHwwfHx8fHx8fHxaSEF0ZEdWaGJXbHVkR1Z5Ym1WME1EUmZNM0JvfGQ4MmYzNjFmYmYxYTJjZGI5NWNmNzZkYzY3MzEwM2Q2M2VlZTU3YmR8MHwwfHwwfHx8MHwwfFcxMD18fDF8VzEwPXw0Zjc2MTkxNDIzYzU3Mzc4NGU4NDI5Y2IwMzhlNDY1NjdlMGU3MmE3fDB8ZHAtdGVhbWludGVybmV0MDRfM3BofDB8MHx8fHx8&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2657853924491968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717108&format=r3%7Cs&nocache=1351738437024872&num=0&output=afd_ads&domain_name=ww38.urltiny.ru&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738437024874&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=721100514&rurl=https%3A%2F%2Fww38.urltiny.ru%2FZScmsliH%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 01 Feb 2025 19:10:24 GMT
expires: Sat, 01 Feb 2025 19:10:24 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-BssRb-172U5XaqiUQ8ifyA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3215
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 01 Feb 2025 19:10:24 GMT
expires: Sat, 01 Feb 2025 19:10:24 GMT
cache-control: private, max-age=3600
etag: "16197818528327903789"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /ct?id=77721&url=https%3A%2F%2Fww38.urltiny.ru%2FZScmsliH%2F&sf=0&tpi=&ch=landingpage&uvid=4f76191423c573784e8429cb038e46567e0e72a7&tsf=0&tsfmi=&tsfu=&cb=1738437025146&hl=2&op=0&ag=2881387774&rand=53617520108191627605522727212226220065029861151220120527820565181158190652118732691862&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=BnxLOTf5Qw&pto=1774&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1738437025.vZviTmAKX0YTM4sK&suid=1.1738437025.CYY6ZAos0YTdvDIm&tuid=1.1738437025.xBGCZZPIzDTCy5b5&fbc=-&gtm=-&it=9%2C919%2C367&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sat, 01 Feb 2025 19:10:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad; Max-Age=29030400; Path=/; Expires=Sat, 03 Jan 2026 19:10:25 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://ww38.urltiny.ru
content-length: 1128
X-Firefox-Spdy: h2

GET /tracker/tc_imp.gif?e=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&cri=BnxLOTf5Qw&ts=251&cb=1738437025397 HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 01 Feb 2025 19:10:25 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2

GET /munin/a/tr/answercheck/yes?domain=urltiny.ru&caf=1&toggle=answercheck&answer=yes&uid=MTczODQzNzAyMy45NDIzOjUyMTgxZTA3OTY1Nzk4MDcwOWY1NWFmMWE2YTJmYWI0ZGQ1YTMwNmQyOGUxZDg0ZWI1MWZmZWM2NzYxODcwMWU6Njc5ZTcxOWZlNjBiOA%3D%3D HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZScmsliH/
Cookie: _cq_duid=1.1738437025.vZviTmAKX0YTM4sK; _cq_suid=1.1738437025.CYY6ZAos0YTdvDIm
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sat, 01 Feb 2025 19:10:25 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Feb 2025 08:32:58 GMT
expires: Sun, 02 Feb 2025 07:32:58 GMT
cache-control: public, max-age=82800
age: 38247
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Feb 2025 04:59:39 GMT
expires: Sun, 02 Feb 2025 03:59:39 GMT
cache-control: public, max-age=82800
age: 51046
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2422
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 19:10:26 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9xso8xstyp9c&aqid=oXGeZ61g26HF3A-U2YXwBw&psid=7840396037&pbt=bs&adbx=375&adby=172&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=721100514&csala=7%7C0%7C306%7C92%7C179&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-78gKRfZOEh_ZZYxAkFR7Fg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 01 Feb 2025 19:10:26 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=4mhjfvq07c2a&aqid=oXGeZ61g26HF3A-U2YXwBw&psid=7840396037&pbt=bv&adbx=375&adby=172&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=721100514&csala=7%7C0%7C306%7C92%7C179&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-TGqDm2NZHLUDYkDZncbbuA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 01 Feb 2025 19:10:26 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1640
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 19:10:28 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1640
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 19:10:30 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1643
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 19:10:35 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1643
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=e3ea072c9eef4230126a0a67e33095ad
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 19:10:40 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /munin/a/ls?t=679e719f&token=4f76191423c573784e8429cb038e46567e0e72a7 HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZScmsliH/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: 
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Sat, 01 Feb 2025 19:10:24 GMT
server: Caddy, nginx
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_VqkRbUuGa4zvCKfAqxPuWEFQCfgAGTp6SLBzRcUUmFVztHcUSvTzQKvVAqVC5ItRf1uqp2RNJOa2aze+kJ35ZA==
x-log-success: 679e71a049d70b9df90c524a
X-Firefox-Spdy: h2

GET /ZScmsliH/ HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 01 Feb 2025 19:10:23 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_d8kMg7wmBkrc3Gq+Bf0Kkjh1POmGXOOjoopHd+4JwuUysmCE1M50FUExriKFcNC9qM9NX5sHgl02ZTZtS963Ng==
x-buckets: bucket003,bucket077
x-domain: urltiny.ru
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: ww38
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 01 Feb 2025 19:10:25 GMT
expires: Sat, 01 Feb 2025 19:10:25 GMT
cache-control: private, max-age=3600
etag: "8374354013157171468"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000