| obseu.astarsbuilding.com/mon |  3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2539
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.shanga.co
content-type: application/json
date: Sat, 26 Apr 2025 17:55:16 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=19d3d5rdocld&cd_fexp=72717108&aqid=Ah4NaMfbJoS2xdwP9bbioA0&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=749831937&csala=9%7C0%7C372%7C56%7C70&lle=0&ifv=1&hpt=1 |  216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=19d3d5rdocld&cd_fexp=72717108&aqid=Ah4NaMfbJoS2xdwP9bbioA0&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=749831937&csala=9%7C0%7C372%7C56%7C70&lle=0&ifv=1&hpt=1 IP216.58.207.238:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintC9:3B:A5:26:0C:7E:1A:E6:96:B8:C5:03:1C:2B:2B:5D:F4:4B:1B:C1 ValidityMon, 31 Mar 2025 08:57:49 GMT - Mon, 23 Jun 2025 08:57:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=19d3d5rdocld&cd_fexp=72717108&aqid=Ah4NaMfbJoS2xdwP9bbioA0&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=749831937&csala=9%7C0%7C372%7C56%7C70&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-O7IizPd48aLEZxS4P4VS6g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 26 Apr 2025 17:55:16 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1739
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.shanga.co
content-type: application/json
date: Sat, 26 Apr 2025 17:55:18 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1742
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.shanga.co
content-type: application/json
date: Sat, 26 Apr 2025 17:55:25 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1742
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.shanga.co
content-type: application/json
date: Sat, 26 Apr 2025 17:55:30 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 391 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=http%3A%2F%2Fww12.shanga.co%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.XpedQ3ibmhmfUonNhYxKFXZuTPcLeLgJRFR8W76Rr4yO6fabhEVGsw.wJBn9mxUvEuX_lIvmubSmQ.IHKV_tWZ7U2tEpXZyTFdr94mj9s8ziiKmOXUJsfzito-e15aiLjfQKJCArs4B6CBgP-5TJvkWXBOb4qT4M-j9QLFCEtLTTSmbutJX18Pz3x7CtArE9FuuFLWorSeExDJFYYiTBYwlv5IZHjKfCuNmyrIIw7JxIafI-qSEYypfTjGGhusyGI7D9RhNlyzq-qPZi2P0ecWxvq44PyPR9U_oKtuPIiu06c4c3b9qN3QsD7YNqlM7IcM7JFBQvdTNBKV3Db0GMTcR6FOmfS16qvpX_iaLhxW3XRDlELIhOMwBNc1x0j7uOnMOI7zwc8_OAgqsYpqYf6Iw-FOQuLS-0ubp0R6jEehfsAeuwlPRiYLyR6pUCEjeizgk2DmvfK0N6QYGiO9QwbkfPS_C6Z-UI8JqLixrl8hVTM7E9aoDVHGGHPqYKXSeOmNJY5GnaYv4WiP_isaf3EA-DfBexEb09Re0dJ0kEQliMAj4VHMHGB0zdnpPzUpldThhoqjChVpmp90X4iPXuW0t2zhzVKGMEuNIbtukbtFcNmCv6x5kFkeeqMQ3z79uJVvfKaCqibj9mjjEBye2xfu9j6xC5SSPOrqqBn317fKcWlBVZxLoca0U8ODDlzqhCB7_iONH_Lb75D1nsQjfClZVzwGTeZxsbPQEg.hiNe5fbz1gqTOVw2dwNXiA&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2910317687964208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=7481745690114430&num=0&output=afd_ads&domain_name=ww12.shanga.co&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1745690114433&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=749831937&rurl=http%3A%2F%2Fww12.shanga.co%2F%3Fusid%3D15%26utid%3D33998160484 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint66:19:DE:95:18:3E:90:8D:7D:31:50:9A:E3:F7:2D:9D:D6:7D:A7:F8 ValidityMon, 31 Mar 2025 08:55:39 GMT - Mon, 23 Jun 2025 08:55:38 GMT
File typeSVG Scalable Vector Graphics image Hash8959ddcd9712196961d93f58064ed655 62ab1e38e7e9fbf58a04381b76c2d96a9c829f24 17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Apr 2025 11:28:42 GMT
expires: Sun, 27 Apr 2025 10:28:42 GMT
cache-control: public, max-age=82800
age: 23193
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| parking3.parklogic.com/page/enhance.js?pcId=12&domain=shanga.co | 172.232.7.47 | 200 OK | 1.6 kB |
URL GET parking3.parklogic.com/page/enhance.js?pcId=12&domain=shanga.co IP172.232.7.47:443 ASN#63949 Akamai Connected Cloud
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerLet's Encrypt Subjectenhance-lb01.parklogic.com FingerprintA9:52:EB:46:72:F6:AB:43:E9:BC:07:14:2E:C8:58:DD:ED:1B:9A:51 ValidityMon, 31 Mar 2025 01:04:57 GMT - Sun, 29 Jun 2025 01:04:56 GMT
File typeJavaScript source, ASCII text Hashdb0d80e8a865ab1c05d4efc0f0049cf0 852cbb8e647febed7f90ea771002524cb3c7166b b4b261cdc0428a749030d37376297a7ae64380f6365eb07d8b7278940a48003f
GET /page/enhance.js?pcId=12&domain=shanga.co HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Apr 2025 17:55:13 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png | 3.167.7.19 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP3.167.7.19:80
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Sat, 26 Apr 2025 11:05:07 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT
ETag: "czzekhpxmtxd8rz"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 4b6691d4a753b7360fa8632b90c77126.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P2
X-Amz-Cf-Id: HJ6jWtLik_nbZrKdtl9P4LgLWvxSBfWXT60l03RYsKvx-xcrzia28Q==
Age: 24607
|
|
| obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=gNGxT95K7t&ts=219&cb=1745690115018 | 3.248.162.96 | 200 OK | 43 B |
URL GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126eebc13cea468b999225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f671dd0d78d557a3e12ad7e7004d53ed664940c6402719250515634075fc3eb6d1e77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c7b1222550ba3df2b652900a3ab1b2bd8adfc27c6b50e204824a8a6a0c7cc7eebcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b0606db6d34c35b08faa6adc59e049f7c7419642caca69817c6cc29424db6c99dae9f58febeb1d38ea3de2eee8235028ae9136c1f71ded574c02d65e469783c39081d0a870866ad0deedd836ae6b7874dc2e65d484964a20c0f874bb41bfd30dd837ae77021314ef30ae2bdbc9a53df7c53eca13e484d09928cc574761fb5518566c4a7bc0ec2df449d7d88c21a6886ef09c6c82c2e5be33cfb5e47e68758fe5486fddf7511a4db4a2a230f649c6b309b1a457e66eaa238841c80695f42ecd7124e5ad8e6f3f3f601f2b0b5c17aafd8d6cd200bf594f4329fbb653de98180ff6a4dba6a16dc0e5f8e185f0a8ed564c3aff5b9bb05b6e9f5e621ad67f40766df267b27019c3f7dc658a64ba3999ff6994ec1f93690e3f210578169ac9e4da3d7f4bd25c47dcd6a1d3d5b01579c6b4f77bc2dd6f699b974b687bf383d84820b0238059961ae23e9f0ca5cd4c9cdb508be4f9b1e0311e998433719e64e2c8e9ff04967e350804936c4656b8a35e8ee80ab9e0d1bc1c9be0f56c447e22c359a854b849a0c329c020494a2c266f3da5039c8b3349ab3b91e3a449869c1cc82d2cf173297bc6b78f1850ec6de7da4598153b034bbf273ec2f2867ac1562288c54ef49dcff58343d941476248b0652f528082531fe96df5f4c0319d8caf5d083eb060230907d3050fa5caac0a1b907e638ac1d253c3d5a6dd0861a83abe076956c852313d918942538188a68abeae01b879df2ea7799edc599db3af393db9d71c81cbf3&cri=gNGxT95K7t&ts=219&cb=1745690115018 IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=gNGxT95K7t&ts=219&cb=1745690115018 HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 26 Apr 2025 17:55:15 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=cyjnx8mpzetq&cd_fexp=72717108&aqid=Ah4NaMfbJoS2xdwP9bbioA0&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=749831937&csala=9%7C0%7C372%7C56%7C70&lle=0&ifv=1&hpt=1 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=cyjnx8mpzetq&cd_fexp=72717108&aqid=Ah4NaMfbJoS2xdwP9bbioA0&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=749831937&csala=9%7C0%7C372%7C56%7C70&lle=0&ifv=1&hpt=1 IP216.58.207.238:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintC9:3B:A5:26:0C:7E:1A:E6:96:B8:C5:03:1C:2B:2B:5D:F4:4B:1B:C1 ValidityMon, 31 Mar 2025 08:57:49 GMT - Mon, 23 Jun 2025 08:57:48 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=cyjnx8mpzetq&cd_fexp=72717108&aqid=Ah4NaMfbJoS2xdwP9bbioA0&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=749831937&csala=9%7C0%7C372%7C56%7C70&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-_ZyBxpjDvXF9SxnqIWbvvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 26 Apr 2025 17:55:16 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| ww12.shanga.co/?usid=15&utid=33998160484 | 75.2.73.197 | 200 OK | 17 kB |
URL User Request GET ww12.shanga.co/?usid=15&utid=33998160484 IP75.2.73.197:80
File typeHTML document, ASCII text, with very long lines (9150) Hashfa6c457040a0c7b01f4823e18cb2e33d 6a4e6611b45e576d8ecdef9b578ebb30533caed3 ef92143b33b8691283876a822c36e40123628569c60647316285f532dfa7855d
GET /?usid=15&utid=33998160484 HTTP/1.1
Host: ww12.shanga.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Sat, 26 Apr 2025 17:55:13 GMT
Server: Caddy, nginx
Vary: Accept-Encoding
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_OH6bhXe8LIKocObwYt9hBUI/3Nvdqr7QfAD9cLhpEobu6iqS9IplLtTYEKCdUBMSUhDPJ5Qas+xr6Gairf1fsg==
X-Buckets: bucket003
X-Domain: shanga.co
X-Language: norwegian
X-Pcrew-Blocked-Reason: hosting network
X-Pcrew-Ip-Organization: Blix Solutions
X-Subdomain: ww12
X-Template: tpl_CleanPeppermintBlack_twoclick
Transfer-Encoding: chunked
|
|
| euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 54.240.174.61 | 200 OK | 111 kB |
URL GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP54.240.174.61:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerAmazon Subject*.astarsbuilding.com FingerprintDD:1E:42:74:B7:0D:4D:51:5C:C2:3A:AF:0C:79:1A:F5:AA:7C:06:D5 ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size111 kB (111247 bytes) Hashafe94535ce21bd3036be4ff3a1ecd46f 1e8dd3d52e3aa19b9da04c6d8bb33050f669bee3 85c3f71659009cce4b4e9564b7631faa7ff2552402e9c2b9365c79be53433f7d
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40789
content-encoding: gzip
server: Caddy
date: Sat, 26 Apr 2025 12:14:27 GMT
cache-control: max-age=43200
expires: Sun, 27 Apr 2025 00:14:23 GMT
etag: "1b28f-Ho3T1S46oZudoExti7MwUPZpvuM"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vzoEqojGgn5odumX71NBdF43AN14-UDbkzo8Gi6gWMrHUzfPqCz-cg==
age: 20450
X-Firefox-Spdy: h2
|
|
| parking3.parklogic.com/page/scribe.php?pcId=12&domain=shanga.co&aId=14&pId=130&usid=15&utid=33998160484&query=null&domainJs=ww12.shanga.co&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null | 172.232.7.47 | 200 OK | 0 B |
URL GET parking3.parklogic.com/page/scribe.php?pcId=12&domain=shanga.co&aId=14&pId=130&usid=15&utid=33998160484&query=null&domainJs=ww12.shanga.co&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null IP172.232.7.47:443 ASN#63949 Akamai Connected Cloud
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerLet's Encrypt Subjectenhance-lb01.parklogic.com FingerprintA9:52:EB:46:72:F6:AB:43:E9:BC:07:14:2E:C8:58:DD:ED:1B:9A:51 ValidityMon, 31 Mar 2025 01:04:57 GMT - Sun, 29 Jun 2025 01:04:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /page/scribe.php?pcId=12&domain=shanga.co&aId=14&pId=130&usid=15&utid=33998160484&query=null&domainJs=ww12.shanga.co&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww12.shanga.co/
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sat, 26 Apr 2025 17:55:14 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| ww12.shanga.co/munin/a/ls?t=680d1e01&token=5c3db7ee266fc945693023857f3882eb41d17b6b | 75.2.73.197 | 201 Created | 0 B |
URL GET ww12.shanga.co/munin/a/ls?t=680d1e01&token=5c3db7ee266fc945693023857f3882eb41d17b6b IP75.2.73.197:80
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=680d1e01&token=5c3db7ee266fc945693023857f3882eb41d17b6b HTTP/1.1
Host: ww12.shanga.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/?usid=15&utid=33998160484
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 201 Created
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin:
Access-Control-Max-Age: 86400
Charset: utf-8
Content-Length: 0
Content-Type: text/javascript;charset=UTF-8
Date: Sat, 26 Apr 2025 17:55:14 GMT
Server: Caddy, nginx
Status: 201 Created
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_CrZxzn7gBzpBdiHQGmH3NmFOdv0BX3ZEWEJ5N4kton2kDLWuZz7OS64WDjcnIUCnPAVP15mnKVh8jpPil2Z0hg==
X-Log-Success: 680d1e0241a38e582c0cc8c9
|
|
| ww12.shanga.co/favicon.ico | 75.2.73.197 | 200 OK | 0 B |
URL GET ww12.shanga.co/favicon.ico IP75.2.73.197:80
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww12.shanga.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/?usid=15&utid=33998160484
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 0
Content-Type: image/x-icon
Date: Sat, 26 Apr 2025 17:55:14 GMT
Etag: "670f7248-0"
Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT
Server: Caddy, nginx
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=http%3A%2F%2Fww12.shanga.co%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.XpedQ3ibmhmfUonNhYxKFXZuTPcLeLgJRFR8W76Rr4yO6fabhEVGsw.wJBn9mxUvEuX_lIvmubSmQ.IHKV_tWZ7U2tEpXZyTFdr94mj9s8ziiKmOXUJsfzito-e15aiLjfQKJCArs4B6CBgP-5TJvkWXBOb4qT4M-j9QLFCEtLTTSmbutJX18Pz3x7CtArE9FuuFLWorSeExDJFYYiTBYwlv5IZHjKfCuNmyrIIw7JxIafI-qSEYypfTjGGhusyGI7D9RhNlyzq-qPZi2P0ecWxvq44PyPR9U_oKtuPIiu06c4c3b9qN3QsD7YNqlM7IcM7JFBQvdTNBKV3Db0GMTcR6FOmfS16qvpX_iaLhxW3XRDlELIhOMwBNc1x0j7uOnMOI7zwc8_OAgqsYpqYf6Iw-FOQuLS-0ubp0R6jEehfsAeuwlPRiYLyR6pUCEjeizgk2DmvfK0N6QYGiO9QwbkfPS_C6Z-UI8JqLixrl8hVTM7E9aoDVHGGHPqYKXSeOmNJY5GnaYv4WiP_isaf3EA-DfBexEb09Re0dJ0kEQliMAj4VHMHGB0zdnpPzUpldThhoqjChVpmp90X4iPXuW0t2zhzVKGMEuNIbtukbtFcNmCv6x5kFkeeqMQ3z79uJVvfKaCqibj9mjjEBye2xfu9j6xC5SSPOrqqBn317fKcWlBVZxLoca0U8ODDlzqhCB7_iONH_Lb75D1nsQjfClZVzwGTeZxsbPQEg.hiNe5fbz1gqTOVw2dwNXiA&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2910317687964208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=7481745690114430&num=0&output=afd_ads&domain_name=ww12.shanga.co&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1745690114433&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=749831937&rurl=http%3A%2F%2Fww12.shanga.co%2F%3Fusid%3D15%26utid%3D33998160484 | 216.58.207.238 | 200 OK | 16 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=http%3A%2F%2Fww12.shanga.co%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.XpedQ3ibmhmfUonNhYxKFXZuTPcLeLgJRFR8W76Rr4yO6fabhEVGsw.wJBn9mxUvEuX_lIvmubSmQ.IHKV_tWZ7U2tEpXZyTFdr94mj9s8ziiKmOXUJsfzito-e15aiLjfQKJCArs4B6CBgP-5TJvkWXBOb4qT4M-j9QLFCEtLTTSmbutJX18Pz3x7CtArE9FuuFLWorSeExDJFYYiTBYwlv5IZHjKfCuNmyrIIw7JxIafI-qSEYypfTjGGhusyGI7D9RhNlyzq-qPZi2P0ecWxvq44PyPR9U_oKtuPIiu06c4c3b9qN3QsD7YNqlM7IcM7JFBQvdTNBKV3Db0GMTcR6FOmfS16qvpX_iaLhxW3XRDlELIhOMwBNc1x0j7uOnMOI7zwc8_OAgqsYpqYf6Iw-FOQuLS-0ubp0R6jEehfsAeuwlPRiYLyR6pUCEjeizgk2DmvfK0N6QYGiO9QwbkfPS_C6Z-UI8JqLixrl8hVTM7E9aoDVHGGHPqYKXSeOmNJY5GnaYv4WiP_isaf3EA-DfBexEb09Re0dJ0kEQliMAj4VHMHGB0zdnpPzUpldThhoqjChVpmp90X4iPXuW0t2zhzVKGMEuNIbtukbtFcNmCv6x5kFkeeqMQ3z79uJVvfKaCqibj9mjjEBye2xfu9j6xC5SSPOrqqBn317fKcWlBVZxLoca0U8ODDlzqhCB7_iONH_Lb75D1nsQjfClZVzwGTeZxsbPQEg.hiNe5fbz1gqTOVw2dwNXiA&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2910317687964208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=7481745690114430&num=0&output=afd_ads&domain_name=ww12.shanga.co&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1745690114433&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=749831937&rurl=http%3A%2F%2Fww12.shanga.co%2F%3Fusid%3D15%26utid%3D33998160484 IP216.58.207.238:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintC9:3B:A5:26:0C:7E:1A:E6:96:B8:C5:03:1C:2B:2B:5D:F4:4B:1B:C1 ValidityMon, 31 Mar 2025 08:57:49 GMT - Mon, 23 Jun 2025 08:57:48 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (15399) Hash3029fd7b97ad928ef5c19d74b37cf9de 2ff0f2ae9a8e61cbfd3ddcc38d671d3f9ea56416 454eb5123e57f80bfee4251bad82bff13cd60eca19ae3bd8f175fae5aba14b1b
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=http%3A%2F%2Fww12.shanga.co%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.XpedQ3ibmhmfUonNhYxKFXZuTPcLeLgJRFR8W76Rr4yO6fabhEVGsw.wJBn9mxUvEuX_lIvmubSmQ.IHKV_tWZ7U2tEpXZyTFdr94mj9s8ziiKmOXUJsfzito-e15aiLjfQKJCArs4B6CBgP-5TJvkWXBOb4qT4M-j9QLFCEtLTTSmbutJX18Pz3x7CtArE9FuuFLWorSeExDJFYYiTBYwlv5IZHjKfCuNmyrIIw7JxIafI-qSEYypfTjGGhusyGI7D9RhNlyzq-qPZi2P0ecWxvq44PyPR9U_oKtuPIiu06c4c3b9qN3QsD7YNqlM7IcM7JFBQvdTNBKV3Db0GMTcR6FOmfS16qvpX_iaLhxW3XRDlELIhOMwBNc1x0j7uOnMOI7zwc8_OAgqsYpqYf6Iw-FOQuLS-0ubp0R6jEehfsAeuwlPRiYLyR6pUCEjeizgk2DmvfK0N6QYGiO9QwbkfPS_C6Z-UI8JqLixrl8hVTM7E9aoDVHGGHPqYKXSeOmNJY5GnaYv4WiP_isaf3EA-DfBexEb09Re0dJ0kEQliMAj4VHMHGB0zdnpPzUpldThhoqjChVpmp90X4iPXuW0t2zhzVKGMEuNIbtukbtFcNmCv6x5kFkeeqMQ3z79uJVvfKaCqibj9mjjEBye2xfu9j6xC5SSPOrqqBn317fKcWlBVZxLoca0U8ODDlzqhCB7_iONH_Lb75D1nsQjfClZVzwGTeZxsbPQEg.hiNe5fbz1gqTOVw2dwNXiA&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2910317687964208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=7481745690114430&num=0&output=afd_ads&domain_name=ww12.shanga.co&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1745690114433&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=749831937&rurl=http%3A%2F%2Fww12.shanga.co%2F%3Fusid%3D15%26utid%3D33998160484 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 26 Apr 2025 17:55:14 GMT
expires: Sat, 26 Apr 2025 17:55:14 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-fgQ7trhb0o7lCeG3sX4Rdw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3516
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 216.58.207.238 | 200 OK | 144 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP216.58.207.238:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=http%3A%2F%2Fww12.shanga.co%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.XpedQ3ibmhmfUonNhYxKFXZuTPcLeLgJRFR8W76Rr4yO6fabhEVGsw.wJBn9mxUvEuX_lIvmubSmQ.IHKV_tWZ7U2tEpXZyTFdr94mj9s8ziiKmOXUJsfzito-e15aiLjfQKJCArs4B6CBgP-5TJvkWXBOb4qT4M-j9QLFCEtLTTSmbutJX18Pz3x7CtArE9FuuFLWorSeExDJFYYiTBYwlv5IZHjKfCuNmyrIIw7JxIafI-qSEYypfTjGGhusyGI7D9RhNlyzq-qPZi2P0ecWxvq44PyPR9U_oKtuPIiu06c4c3b9qN3QsD7YNqlM7IcM7JFBQvdTNBKV3Db0GMTcR6FOmfS16qvpX_iaLhxW3XRDlELIhOMwBNc1x0j7uOnMOI7zwc8_OAgqsYpqYf6Iw-FOQuLS-0ubp0R6jEehfsAeuwlPRiYLyR6pUCEjeizgk2DmvfK0N6QYGiO9QwbkfPS_C6Z-UI8JqLixrl8hVTM7E9aoDVHGGHPqYKXSeOmNJY5GnaYv4WiP_isaf3EA-DfBexEb09Re0dJ0kEQliMAj4VHMHGB0zdnpPzUpldThhoqjChVpmp90X4iPXuW0t2zhzVKGMEuNIbtukbtFcNmCv6x5kFkeeqMQ3z79uJVvfKaCqibj9mjjEBye2xfu9j6xC5SSPOrqqBn317fKcWlBVZxLoca0U8ODDlzqhCB7_iONH_Lb75D1nsQjfClZVzwGTeZxsbPQEg.hiNe5fbz1gqTOVw2dwNXiA&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2910317687964208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=7481745690114430&num=0&output=afd_ads&domain_name=ww12.shanga.co&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1745690114433&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=749831937&rurl=http%3A%2F%2Fww12.shanga.co%2F%3Fusid%3D15%26utid%3D33998160484 CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintC9:3B:A5:26:0C:7E:1A:E6:96:B8:C5:03:1C:2B:2B:5D:F4:4B:1B:C1 ValidityMon, 31 Mar 2025 08:57:49 GMT - Mon, 23 Jun 2025 08:57:48 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size144 kB (143557 bytes) Hasha4023dc6313b3585b5487aaa8f120e53 b593d0edbd9a7f254e91ab8705837eeda47f7d43 800a10d757fab4162911b5a0e35bcfcb8ef6593aa728c8bf04b43b1dc5c3322f
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 26 Apr 2025 17:55:14 GMT
expires: Sat, 26 Apr 2025 17:55:14 GMT
cache-control: private, max-age=3600
etag: "13485492764906738849"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| obseu.astarsbuilding.com/ct | 3.248.162.96 | 200 OK | 3.4 kB |
URL POST obseu.astarsbuilding.com/ct IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hash24559799994381d2f41c915701d8cdc3 dc8555e976c792a7588f3756ae21cb499712dc63 9e186802ec09979ece91cc90614432e2b56a6f86c09f9c17f4d8fae79a3f3801
POST /ct HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 4576
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.shanga.co
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: application/json
date: Sat, 26 Apr 2025 17:55:14 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a; Max-Age=29030400; Path=/; Expires=Sat, 28 Mar 2026 17:55:14 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: http://ww12.shanga.co
content-length: 1132
X-Firefox-Spdy: h2
|
|
| ww12.shanga.co/?usid=15&utid=33998160484 |  0.0.0.0 | | 0 B |
URL User Request GET ww12.shanga.co/?usid=15&utid=33998160484 IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?usid=15&utid=33998160484 HTTP/1.1
Host: ww12.shanga.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true | 142.250.74.68 | 200 OK | 144 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP142.250.74.68:80
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484
File typeJavaScript source, ASCII text, with very long lines (1839) Size144 kB (143550 bytes) Hash0e30be2cad549b31e1c91849df0da571 e5aefe03c588e1b59fbb10f7c5c9316b32d94ebd fab573b903bd9c3a1294cc3799ca01038fec5f13c76f23d7e2880bd8036da57f
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Type: text/javascript; charset=UTF-8
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui"
Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
Date: Sat, 26 Apr 2025 17:55:14 GMT
Expires: Sat, 26 Apr 2025 17:55:14 GMT
Cache-Control: private, max-age=3600
ETag: "13069576514652494655"
X-Content-Type-Options: nosniff
Link: <https://syndicatedsearch.goog>; rel="preconnect"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: sffe
X-XSS-Protection: 0
|
|
| ww12.shanga.co/munin/a/tr/answercheck/yes?domain=shanga.co&caf=1&toggle=answercheck&answer=yes&uid=MTc0NTY5MDExMy40NzI6NmVhMWI1MGYyMjhiNGMxOWFiOGUxZjE3YzUwNjk2M2NiNzQ4NmE1ZWJiNjAxMjgwNDFkZDI0YmVlN2VlMmM0Mzo2ODBkMWUwMTczM2Ey | 75.2.73.197 | 200 OK | 0 B |
URL GET ww12.shanga.co/munin/a/tr/answercheck/yes?domain=shanga.co&caf=1&toggle=answercheck&answer=yes&uid=MTc0NTY5MDExMy40NzI6NmVhMWI1MGYyMjhiNGMxOWFiOGUxZjE3YzUwNjk2M2NiNzQ4NmE1ZWJiNjAxMjgwNDFkZDI0YmVlN2VlMmM0Mzo2ODBkMWUwMTczM2Ey IP75.2.73.197:80
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/answercheck/yes?domain=shanga.co&caf=1&toggle=answercheck&answer=yes&uid=MTc0NTY5MDExMy40NzI6NmVhMWI1MGYyMjhiNGMxOWFiOGUxZjE3YzUwNjk2M2NiNzQ4NmE1ZWJiNjAxMjgwNDFkZDI0YmVlN2VlMmM0Mzo2ODBkMWUwMTczM2Ey HTTP/1.1
Host: ww12.shanga.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/?usid=15&utid=33998160484
Cookie: _cq_duid=1.1745690114.xt2y5HXUJvLh4z6d; _cq_suid=1.1745690114.N5oTQRYOASHFLFT8
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Date: Sat, 26 Apr 2025 17:55:14 GMT
Server: Caddy, nginx
X-Custom-Track: answercheck
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=http%3A%2F%2Fww12.shanga.co%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.XpedQ3ibmhmfUonNhYxKFXZuTPcLeLgJRFR8W76Rr4yO6fabhEVGsw.wJBn9mxUvEuX_lIvmubSmQ.IHKV_tWZ7U2tEpXZyTFdr94mj9s8ziiKmOXUJsfzito-e15aiLjfQKJCArs4B6CBgP-5TJvkWXBOb4qT4M-j9QLFCEtLTTSmbutJX18Pz3x7CtArE9FuuFLWorSeExDJFYYiTBYwlv5IZHjKfCuNmyrIIw7JxIafI-qSEYypfTjGGhusyGI7D9RhNlyzq-qPZi2P0ecWxvq44PyPR9U_oKtuPIiu06c4c3b9qN3QsD7YNqlM7IcM7JFBQvdTNBKV3Db0GMTcR6FOmfS16qvpX_iaLhxW3XRDlELIhOMwBNc1x0j7uOnMOI7zwc8_OAgqsYpqYf6Iw-FOQuLS-0ubp0R6jEehfsAeuwlPRiYLyR6pUCEjeizgk2DmvfK0N6QYGiO9QwbkfPS_C6Z-UI8JqLixrl8hVTM7E9aoDVHGGHPqYKXSeOmNJY5GnaYv4WiP_isaf3EA-DfBexEb09Re0dJ0kEQliMAj4VHMHGB0zdnpPzUpldThhoqjChVpmp90X4iPXuW0t2zhzVKGMEuNIbtukbtFcNmCv6x5kFkeeqMQ3z79uJVvfKaCqibj9mjjEBye2xfu9j6xC5SSPOrqqBn317fKcWlBVZxLoca0U8ODDlzqhCB7_iONH_Lb75D1nsQjfClZVzwGTeZxsbPQEg.hiNe5fbz1gqTOVw2dwNXiA&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2910317687964208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=7481745690114430&num=0&output=afd_ads&domain_name=ww12.shanga.co&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1745690114433&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=749831937&rurl=http%3A%2F%2Fww12.shanga.co%2F%3Fusid%3D15%26utid%3D33998160484 CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint66:19:DE:95:18:3E:90:8D:7D:31:50:9A:E3:F7:2D:9D:D6:7D:A7:F8 ValidityMon, 31 Mar 2025 08:55:39 GMT - Mon, 23 Jun 2025 08:55:38 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Apr 2025 13:11:17 GMT
expires: Sun, 27 Apr 2025 12:11:17 GMT
cache-control: public, max-age=82800
age: 17038
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1739
Origin: http://ww12.shanga.co
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/
Cookie: cg_uuid=dbd4bf19c670b596c8d7b12a91305e6a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.shanga.co
content-type: application/json
date: Sat, 26 Apr 2025 17:55:20 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ww12.shanga.co/munin/a/tr/browserjs?domain=shanga.co&toggle=browserjs&uid=MTc0NTY5MDExMy40NzI6NmVhMWI1MGYyMjhiNGMxOWFiOGUxZjE3YzUwNjk2M2NiNzQ4NmE1ZWJiNjAxMjgwNDFkZDI0YmVlN2VlMmM0Mzo2ODBkMWUwMTczM2Ey | 75.2.73.197 | 200 OK | 0 B |
URL GET ww12.shanga.co/munin/a/tr/browserjs?domain=shanga.co&toggle=browserjs&uid=MTc0NTY5MDExMy40NzI6NmVhMWI1MGYyMjhiNGMxOWFiOGUxZjE3YzUwNjk2M2NiNzQ4NmE1ZWJiNjAxMjgwNDFkZDI0YmVlN2VlMmM0Mzo2ODBkMWUwMTczM2Ey IP75.2.73.197:80
Requested byhttp://ww12.shanga.co/?usid=15&utid=33998160484
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=shanga.co&toggle=browserjs&uid=MTc0NTY5MDExMy40NzI6NmVhMWI1MGYyMjhiNGMxOWFiOGUxZjE3YzUwNjk2M2NiNzQ4NmE1ZWJiNjAxMjgwNDFkZDI0YmVlN2VlMmM0Mzo2ODBkMWUwMTczM2Ey HTTP/1.1
Host: ww12.shanga.co
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.shanga.co/?usid=15&utid=33998160484
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Access-Control-Allow-Origin: *
Content-Length: 0
Content-Type: text/html; charset=UTF-8
Date: Sat, 26 Apr 2025 17:55:14 GMT
Server: Caddy, nginx
X-Custom-Track: browserjs
|
|