GET /ZvEbpyTD/ HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 01 Feb 2025 18:04:33 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_jNxHHffbXJfndgL6oDcCnkpp5DLfOSNZ9RgDaHs2DhIpEaKp0geRWmrdjLd04wiGcfimvQyIzrPV6w/OKMrE9Q==
x-buckets: bucket003,bucket077
x-domain: urltiny.ru
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: ww38
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2

GET /sxp/i/c4601e5f6cdd73216cafdd5af209201c.js HTTP/1.1
Host: euob.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40030
content-encoding: gzip
server: Caddy
date: Sat, 01 Feb 2025 07:09:19 GMT
cache-control: max-age=43200
expires: Sat, 01 Feb 2025 19:09:19 GMT
etag: "1abea-hhqiRr1YIatnkfGdKKjUGlB9O+4"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 40grsXCouJu_VVEKRsWt8TW_3Ocbr8Ygy0S_HvrLlyjB5nJUvuDLGw==
age: 39314
X-Firefox-Spdy: h2

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Sat, 01 Feb 2025 11:05:00 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: p5WS3ybMOzVxF7jQVWtsUyGpvhGtofo5wAvDFSHLw5pu9M2ASvyBMw==
age: 25173
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZvEbpyTD/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Sat, 01 Feb 2025 18:04:33 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 01 Feb 2025 18:04:33 GMT
expires: Sat, 01 Feb 2025 18:04:33 GMT
cache-control: private, max-age=3600
etag: "16197818528327903789"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 01 Feb 2025 18:04:34 GMT
expires: Sat, 01 Feb 2025 18:04:34 GMT
cache-control: private, max-age=3600
etag: "11264286333016304189"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /tracker/tc_imp.gif?e=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&cri=dQqlTbzwsv&ts=229&cb=1738433074426 HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Sat, 01 Feb 2025 18:04:34 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Feb 2025 08:32:58 GMT
expires: Sun, 02 Feb 2025 07:32:58 GMT
cache-control: public, max-age=82800
age: 34296
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Feb 2025 04:59:39 GMT
expires: Sun, 02 Feb 2025 03:59:39 GMT
cache-control: public, max-age=82800
age: 47095
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2421
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 18:04:35 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=pgnhn3g5pqax&aqid=MmKeZ6brAdWSiM0P24PV6QU&psid=7840396037&pbt=bv&adbx=375&adby=172&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=721100514&csala=5%7C0%7C248%7C59%7C262&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Ct7PdiIOW-NXNP2L4dSlqQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 01 Feb 2025 18:04:36 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=mnmmbxuqogkn&aqid=MmKeZ6brAdWSiM0P24PV6QU&psid=7840396037&pbt=bs&adbx=375&adby=172&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=721100514&csala=5%7C0%7C248%7C59%7C262&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-tHSsNc4xBzDc_C_se7HKqQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Sat, 01 Feb 2025 18:04:36 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1639
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 18:04:37 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1639
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 18:04:39 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1642
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 18:04:44 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1642
Origin: https://ww38.urltiny.ru
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.urltiny.ru
content-type: application/json
date: Sat, 01 Feb 2025 18:04:49 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /munin/a/tr/browserjs?domain=urltiny.ru&toggle=browserjs&uid=MTczODQzMzA3My4yMTM4OjY0ZGJiYTFlNGI0NGZlNTEzYTA1ZmFlMTg0NDRhMTUxYzc5NWQ1YmZjMDY5NjFkZjMyM2RjMzMxMWZjNjU3ZGQ6Njc5ZTYyMzEzNDM1OA%3D%3D HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZvEbpyTD/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Sat, 01 Feb 2025 18:04:33 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2

GET /munin/a/tr/answercheck/yes?domain=urltiny.ru&caf=1&toggle=answercheck&answer=yes&uid=MTczODQzMzA3My4yMTM4OjY0ZGJiYTFlNGI0NGZlNTEzYTA1ZmFlMTg0NDRhMTUxYzc5NWQ1YmZjMDY5NjFkZjMyM2RjMzMxMWZjNjU3ZGQ6Njc5ZTYyMzEzNDM1OA%3D%3D HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZvEbpyTD/
Cookie: _cq_duid=1.1738433074.XopgPC3SQ7vR8ptA; _cq_suid=1.1738433074.ymVvGAzEmFBJ0i2C
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Sat, 01 Feb 2025 18:04:34 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-custom-track: answercheck
X-Firefox-Spdy: h2

GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.urltiny.ru%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwMDMsYnVja2V0MDc3fHx8fHx8Njc5ZTYyMzEzNDMyYXx8fDE3Mzg0MzMwNzMuMjM0fDBhYmMwNmM1ZTM0OTZjOTAyZDQyMTYxOTJmOTE5Nzk0MmQ5ZWRkM2J8fHx8fDF8fDB8MHx8fHwxfHx8fHwwfDB8fHx8fHx8fFpIQXRkR1ZoYldsdWRHVnlibVYwTURSZk0zQm98ZDgyZjM2MWZiZjFhMmNkYjk1Y2Y3NmRjNjczMTAzZDYzZWVlNTdiZHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDY0MDYxZDFhMGY1ZmJlOGM3MzJmMGQyZmFmYTAzODFhZjk4M2UzZTJ8MHxkcC10ZWFtaW50ZXJuZXQwNF8zcGh8MHwwfHx8fHw%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2657853924491968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301266%2C72717107&format=r3%7Cs&nocache=6801738433073917&num=0&output=afd_ads&domain_name=ww38.urltiny.ru&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1738433073918&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=797&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=721100514&rurl=https%3A%2F%2Fww38.urltiny.ru%2FZvEbpyTD%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 01 Feb 2025 18:04:34 GMT
expires: Sat, 01 Feb 2025 18:04:34 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-VAwQTz0qak9SkU-sBGNwDw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3208
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /munin/a/ls?t=679e6231&token=64061d1a0f5fbe8c732f0d2fafa0381af983e3e2 HTTP/1.1
Host: ww38.urltiny.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/ZvEbpyTD/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin: 
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Sat, 01 Feb 2025 18:04:33 GMT
server: Caddy, nginx
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_mJqFzNted1Mp4l6eZ/R7+r1M1JjmmhhlYkIiCCOK7YGNu9Fyxxn55Lmy4hKH884RRy/TA7fwoC55RsgYL59mQQ==
x-log-success: 679e62318167cb5e3709aeaf
X-Firefox-Spdy: h2

GET /ct?id=77721&url=https%3A%2F%2Fww38.urltiny.ru%2FZvEbpyTD%2F&sf=0&tpi=&ch=landingpage&uvid=64061d1a0f5fbe8c732f0d2fafa0381af983e3e2&tsf=0&tsfmi=&tsfu=&cb=1738433074197&hl=2&op=0&ag=2881387774&rand=94775019292825898818799927090710962218015187107171550507727267277227217525607745587502&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D%3D&dep=0&pre=0&sdd=&cri=dQqlTbzwsv&pto=1091&ver=63&gac=-&mei=&ap=&fe=1&duid=1.1738433074.XopgPC3SQ7vR8ptA&suid=1.1738433074.ymVvGAzEmFBJ0i2C&tuid=1.1738433074.Sbm5OsEkN3yZYZ6g&fbc=-&gtm=-&it=10%2C302%2C144&fbcl=-&gacl=-&gacsd=-&rtic=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.netgreencolumn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.urltiny.ru/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Sat, 01 Feb 2025 18:04:34 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=5984ed95e9c9aa9441e9811f71b4a2e3; Max-Age=29030400; Path=/; Expires=Sat, 03 Jan 2026 18:04:34 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://ww38.urltiny.ru
content-length: 1129
X-Firefox-Spdy: h2