GET /tr/mainsite2023/navbar-logo-dark-2023.png HTTP/1.1
Host: www.dynadot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 04 Aug 2025 08:42:37 GMT
content-type: image/webp
content-length: 2132
cf-ray: 969cc32d89685689-OSL
cache-control: public, max-age=1209600
cf-bgj: imgq:85,h2pri
cf-polished: origFmt=png, origSize=4843
content-disposition: inline; filename="navbar-logo-dark-2023.webp"
etag: 1754043867412
expires: Mon, 18 Aug 2025 08:42:37 GMT
strict-transport-security: max-age=2592000
vary: Accept
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 253004
accept-ranges: bytes
access-control-allow-origin: *.mouseflow.com
server: cloudflare
X-Firefox-Spdy: h2

GET /favicon.ico HTTP/1.1
Host: lzvsswww.backup.viplogin4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50550"; ma=2592000
content-type: image/x-icon
date: Mon, 04 Aug 2025 08:42:37 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: nginx
via: 1.1 Caddy
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1916
Origin: https://lzvsswww.backup.viplogin4.com
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://lzvsswww.backup.viplogin4.com
content-type: application/json
date: Mon, 04 Aug 2025 08:42:53 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9fgvwkn7cnd2&cd_fexp=72717107&aqid=fXKQaIfyKL7AxdwPlrrl-QM&psid=5837883959&pbt=bv&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=788436323&csala=7%7C0%7C298%7C124%7C175&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-F-sYE5Dr0QYx86BSk_4fmg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
permissions-policy: unload=()
date: Mon, 04 Aug 2025 08:42:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /munin/a/ls?t=6890727c&token=5f226f419314e5eca0349c01f1b6a212e30aca5d HTTP/1.1
Host: lzvsswww.backup.viplogin4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 201 Created
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-origin: *
access-control-max-age: 86400
alt-svc: h3=":50550"; ma=2592000
date: Mon, 04 Aug 2025 08:42:37 GMT
server: nginx
via: 1.1 Caddy
x-log-success: 6890727da492bc62fc80b6ab
content-length: 0
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js?pac=2 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 04 Aug 2025 08:42:37 GMT
expires: Mon, 04 Aug 2025 08:42:37 GMT
cache-control: private, max-age=3600
etag: "12657802773157093184"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET /ct?id=80705&url=https%3A%2F%2Flzvsswww.backup.viplogin4.com%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=5f226f419314e5eca0349c01f1b6a212e30aca5d&tsf=0&tsfmi=&tsfu=&cb=1754296957850&hl=2&op=0&ag=637386554&rand=9350185569265926000929702060892816267787280000971802618011001926578110226122793961999021&fs=1280x1024&fst=1280x1024&np=win32&nv=&ref=&ss=1280x1024&nc=0&at=&di=W1siZWYiLDgxNTldLFsiYWJuY2giLDE2XSxbLTE1LCItIl0sWy00MywiMDAwMDAwMDEwMDAwMDAwMDAwMTExMDAxMDAwMDAxMDAwMDAwMDAwMDAiXSxbLTUxLCItIl0sWy01MywiMDAxIl0sWy0xMSwie1widFwiOlwiXCIsXCJtXCI6W119Il0sWy0xMywiLSJdLFsxMiwie1wiY3R4XCI6XCJ3ZWJnbFwiLFwidlwiOlwibWVzYVwiLFwiclwiOlwibGx2bXBpcGVcIixcInNsdlwiOlwid2ViZ2wgZ2xzbCBlcyAxLjBcIixcImd2ZXJcIjpcIndlYmdsIDEuMFwiLFwiZ3ZlblwiOlwibW96aWxsYVwiLFwiYmVuXCI6MTMxLFwid2dsXCI6MSxcImdyZW5cIjpcImxsdm1waXBlXCIsXCJzZWZcIjo0OTQxOTUwNDMsXCJzZWNcIjpcIlwifSJdLFstMjQsIltdIl0sWy01NiwibGFuZHNjYXBlLXByaW1hcnkiXSxbLTY5LCJXaW4zMnx8fDQ4fC18LSJdLFstNzQsIi0iXSxbLTIsIjEyLElzTjluR25XYkFZQUl4TmZRYU9xR0UwQ0ZBUXNjRzAwSW5oT2JZQkFLWVVPelFPNkVYMDIwSW1HTGN1NjJ1cmRQL2MyZDJwTm1WWkF3ZjMvLzh6NzlHckhhMVd1M09tWFBQdmUiXSxbLTcsIi0iXSxbLTQ3LCJVVEMsZW4tVVMsbGF0bixncmVnb3J5Il0sWy03MiwiRXhVPSJdLFstNSwiLSJdLFstMTYsIjAiXSxbLTE4LCJbMSwwLDAsMF0iXSxbLTMwLCJbXCJ2XCIsMF0iXSxbLTMxLCJmYWxzZSJdLFstMzgsImksLTEsLTEsMzcsMCwxLDAsMCw1Myw1NiwtMSwwLCw0NTEsMTAzNywxMDM3Il0sWy00NiwiMCJdLFstNDksIi0iXSxbLTU3LCJTM2xSVFUxSlNnTVdGbHhNVmxzWFFGWk1TbHhZU2xKQUYxcFdWQlpLUVVrV1VCWUxDdzFmQVF3S0NRdFlXQXRiRDF4YUNnbFlXRm9BV0FFTVhWZ0xXbHRmQUJkVFNnTUlBdzhNQ1FrS0ZRNElBQlpORjF4QlNWWkxUVW9XQlhsUlRVMUpTZ01XRmx4TVZsc1hRRlpNU2x4WVNsSkFGMXBXVkJaS1FVa1dVQllMQ3cxZkFRd0tDUXRZV0F0YkQxeGFDZ2xZV0ZvQVdBRU1YVmdMV2x0ZkFCZFRTZ01JQXc4TUNBQUFGVXBjVFcxUVZGeFdURTBaVVZoWFhWVmNTeE1PQ0FBV1RSZGNRVWxXUzAxS0ZnVjVVVTFOU1VvREZoWmNURlpiRjBCV1RFcGNXRXBTUUJkYVZsUVdTa0ZKRmxBV0N3c05Yd0VNQ2drTFdGZ0xXdzljV2c9PSJdLFstNjgsIi0iXSxbLTcxLCJhMDEwMDEwMTEwMDEwMDEwMTAwMDEwMTAwMTEwMTEwMDAwMDAxMCJdLFstMTQsIi0iXSxbLTM0LCItIl0sWy0zNywiLSJdLFstNDAsIjM3Il0sWy01MCwiLSJdLFstNjQsIi0iXSxbLTMsIltcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIixcImludGVybmFsLXBkZi12aWV3ZXJcIl0iXSxbLTM2LCJbXCI1LzRcIixcIjUvNFwiXSJdLFstNDUsIjc1MiwwLDAsNzE5LDAsMCw3NjEsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCJdLFstNTIsIi0iXSxbLTU1LCIwIl0sWy0yOSwiLSJdLFstNjIsIjU4Il0sWy03MywiRWhRPSJdLFstOSwiLSJdLFstMjEsIi0iXSxbLTI1LCItIl0sWy00OCwiW1wiLVwiLFwiLVwiLFwiLVwiLFwiLVwiLFwiLVwiXSJdLFstNTQsIntcImhcIjpbXCIzMjk5NzI4NDUyXCIsXCI4MjI4MjMxMTlcIixcIl8zXCIsXCIyNjM5MjIyNDY4XCJdLFwiZFwiOltdLFwiYlwiOltcIl8wXCIsXCIyNjQ2MDM4ODJcIl0sXCJzXCI6MX0iXSxbLTYzLCItIl0sWy02NSwiLSJdLFstNCwiLSJdLFstOCwiLSJdLFstMTIsIlwiMVwiIl0sWy0xNywiNDgiXSxbLTIzLCIrIl0sWy0yNywiLSJdLFstMzMsIi0iXSxbLTM5LCJbXCIyMDEwMDEwMVwiLDIsXCJHZWNrb1wiLFwiTmV0c2NhcGVcIixcIk1vemlsbGFcIixcIjIwMTgxMDAxMDAwMDAwXCIsbnVsbCxmYWxzZSxudWxsLGZhbHNlLG51bGwsNSx0cnVlLGZhbHNlLG51bGwsMCxmYWxzZSxmYWxzZSxmYWxzZSxmYWxzZV0iXSxbLTU4LCItIl0sWy02MCwiLSJdLFsiYm5jaCIsNTYyXSxbLTEsIkxpbnV4IHg4Nl82NCJdLFstNiwie1wid1wiOltcIjBcIixcInRjYmxvY2tcIixcInNlYXJjaGJveEJsb2NrXCIsXCJnZXRYTUxodHRwXCIsXCJhamF4UXVlcnlcIixcImFqYXhCYWNrZmlsbFwiLFwibG9hZEZlZWRcIixcInhtbEh0dHBcIixcImxzXCIsXCJnZXRMb2FkRmVlZEFyZ3VtZW50c1wiLFwiTm90aWZ5UGFpbnRFdmVudFwiLFwiX19jdGNnX2N0XzgwNzA1X2V4ZWNcIixcImdvb2dsZU5EVF9cIixcImdvb2dsZUFsdExvYWRlclwiLFwiZ29vZ2xlXCIsXCJfX3Nhc0Nvb2tpZVwiXSxcIm5cIjpbXSxcImRcIjpbXX0iXSxbLTIyLCJbXCJuXCIsXCJuXCJdIl0sWy0yNiwiLSJdLFstMjgsImVuLVVTLGVuIl0sWy0zMiwiMCJdLFstNDEsIi0iXSxbLTQ0LCIwLDUsMCw1Il0sWy02NiwiLSJdLFstNjcsIi0iXSxbLTEwLCItIl0sWy0xOSwiWzAsMCwwLDAsMCwwLDEsMjQsMjQsXCItXCIsMTI4MCwxMDI0LDEyODAsMTAyNCwxMjgwLDEwMjQsMTI4MCwxMDI0LDAsMCwwLDAsXCItXCIsXCItXCIsMTI4MCwxMDI0LG51bGxdIl0sWy0yMCwiLSJdLFstMzUsIlsxNzU0Mjk2OTU3ODQyLDBdIl0sWy00MiwiODgzMzk5MDE2Il0sWy01OSwiLSJdLFstNjEsIi0iXSxbLTcwLCItIl0sWyJkZGIiLCIwLDEyLDAsMSwyLDQsMCwwLDAsMCwwLDAsMSwwLDEsMCwwLDAsMCwxLDAsMCwwLDAsMCwwLDEsMCwwLDAsMCwwLDEsMCwwLDMsMCwxLDAsMCwwLDAsMiw0LDUyLDAsMjIsMCwxLDEsMCwwLDIsMCwwLDAsMCwyLDEsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDEsMCwwLDAiXSxbImNiIiwiMCwwLDAsMCwwLDAsMCwwLDAsNiw1MiwwLDEzNSwwLDAsMSwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMywwLDAsMCwxLDAsMSwxLDAsMCwwLDAsMCwwLDAsMCwwLDEsMCwxLDIsMCwwLDAsMCwwLDAsMCwwLDAsMSwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwwLDAsMCwxLDAsMCwwLDEsMCJdXQ%3D%3D&dep=0&pre=0&sdd=&cri=IlXUYgKBrN&pto=1230&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1754296957.odui8xhjajhTIYk9&suid=1.1754296957.baCNRgcCOuBS8p5z&tuid=1.1754296957.TjSCN0VW08RZzPqu&fbc=-&gtm=-&it=10%2C343%2C125&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Mon, 04 Aug 2025 08:42:38 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653; Max-Age=29030400; Path=/; Expires=Mon, 06 Jul 2026 08:42:38 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://lzvsswww.backup.viplogin4.com
content-length: 1283
X-Firefox-Spdy: h2

GET /tracker/tc_imp.gif?e=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&cri=IlXUYgKBrN&ts=213&cb=1754296958063 HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Mon, 04 Aug 2025 08:42:38 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Aug 2025 11:59:49 GMT
expires: Mon, 04 Aug 2025 10:59:49 GMT
cache-control: public, max-age=82800
age: 74569
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2683
Origin: https://lzvsswww.backup.viplogin4.com
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://lzvsswww.backup.viplogin4.com
content-type: application/json
date: Mon, 04 Aug 2025 08:42:39 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1913
Origin: https://lzvsswww.backup.viplogin4.com
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://lzvsswww.backup.viplogin4.com
content-type: application/json
date: Mon, 04 Aug 2025 08:42:41 GMT
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1913
Origin: https://lzvsswww.backup.viplogin4.com
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://lzvsswww.backup.viplogin4.com
content-type: application/json
date: Mon, 04 Aug 2025 08:42:43 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /munin/a/tr/browserjs?domain=viplogin4.com&toggle=browserjs&uid=MTc1NDI5Njk1Ni43MzU5OjNiZGI5MDNjYTM2OTM3OTkxMzY4MzVkNTE4OTBlYjc4Y2EwOTYwN2UyMjg5ODlmM2U5NmEzNWZmYTVmMTJiZTQ6Njg5MDcyN2NiM2FiNg%3D%3D HTTP/1.1
Host: lzvsswww.backup.viplogin4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50550"; ma=2592000
content-type: text/html; charset=UTF-8
date: Mon, 04 Aug 2025 08:42:37 GMT
server: nginx
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2

GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 42496
content-encoding: gzip
server: Caddy
date: Mon, 04 Aug 2025 05:27:38 GMT
cache-control: max-age=43200
expires: Mon, 04 Aug 2025 17:27:38 GMT
etag: "1c463-a58KpXdeaJHjsjAtkPOrxOllwUk"
vary: accept-encoding
x-cache: Hit from cloudfront
via: 1.1 dbce95cfea7b1c6844697c831d524fb6.cloudfront.net (CloudFront)
x-amz-cf-pop: HEL51-P4
x-amz-cf-id: iaTyYVP1Oi25CRTdcZ4Qzuf8_kgT_eMVn9lV25KDTOfEKL-vTR35WA==
age: 11699
X-Firefox-Spdy: h2

GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Flzvsswww.backup.viplogin4.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.kYiupkjqaYM1Q7mAOPxS86BngTpNsHqead8ROqOGq4Tzu49FrfsYpg.V23P2-e6hdLBU5uK3aaeBw.ODkjtGLKR7d3VXo5habwvu44zOLObFd3w-b42CJas-Io0UNOOFWlOAYDdzcN-9NVU2GatOSmKSHWbQs2lfdzR_rYhq8h0r5HPJEL0PbgINTnwL8aqEpOdPMZV97dnYk1G3ueU7F7XhMm6_q8Rb5lHCL46lgKxE3sUdrdCtCH6zWKN6TeZoXgc2TfVa3TtoD3VbN7lKo_sKF6vAjnswQaeGGDoYdd8iEWP0hO8nSSU4OR61hedC2VT85WGWcNc3vZ_orfwJKnpaB0DkXBWfayBC1o1pHxuR309-1Vt9BsPdgV2EwbWDvzMsD036c2gVHtMTXHYcNc7YEnezae2QszfmUKc8FJCQNeeVXmyJf1dLqqXdxDtzsSavhhqaQ2Q6aN6xy-_WRT0dauI8RZLN8jhme2i07jjf537B1fpwjOFqm5FlG0pBqDPMcWDMBZOIZCLEE0y-7A0SUrgdK-rxPpRfbqPeURV65R_sI5jEQFyzvvEZjILJvpjylXSF8uIYgfPb2pzSvPwSDTxIfm_HOoyGSUaG5jCTjLyQDTLk8Vjnm9UmcreGbS6E5sQqwE4e4XQLVlAZr25FGdV2P5_UuLGoiLJz9B_HOFFqKRuf2PS0cshxHa2a0E99ox1lDBmqKjo9CKwNwPB3ezutF7075Unw.H4DsKujJzG6c3vgcknlykg&max_radlink_len=40&type=3&swp=as-drid-2595154941770008&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=3481754296957532&num=0&output=afd_ads&domain_name=lzvsswww.backup.viplogin4.com&v=3&bsl=8&pac=2&u_his=2&u_tz=0&dt=1754296957534&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=861&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=788436323&rurl=https%3A%2F%2Flzvsswww.backup.viplogin4.com%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Mon, 04 Aug 2025 08:42:37 GMT
expires: Mon, 04 Aug 2025 08:42:37 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-NklwQYR1c3Mv86__HpkKww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
accept-ch: Downlink, RTT
content-encoding: br
server: gws
content-length: 3480
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /munin/a/tr/answercheck/yes?domain=viplogin4.com&caf=1&toggle=answercheck&answer=yes&uid=MTc1NDI5Njk1Ni43MzU5OjNiZGI5MDNjYTM2OTM3OTkxMzY4MzVkNTE4OTBlYjc4Y2EwOTYwN2UyMjg5ODlmM2U5NmEzNWZmYTVmMTJiZTQ6Njg5MDcyN2NiM2FiNg%3D%3D HTTP/1.1
Host: lzvsswww.backup.viplogin4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: _cq_duid=1.1754296957.odui8xhjajhTIYk9; _cq_suid=1.1754296957.baCNRgcCOuBS8p5z
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50550"; ma=2592000
content-type: text/html; charset=UTF-8
date: Mon, 04 Aug 2025 08:42:38 GMT
server: nginx
via: 1.1 Caddy, 0.0 Caddy
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2

POST /mon HTTP/1.1
Host: obseu.youseasky.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1916
Origin: https://lzvsswww.backup.viplogin4.com
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Cookie: cg_uuid=07a68b71c2feb5ca1965c4b78d7e5653
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://lzvsswww.backup.viplogin4.com
content-type: application/json
date: Mon, 04 Aug 2025 08:42:48 GMT
content-length: 0
X-Firefox-Spdy: h2

GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 03 Aug 2025 12:11:50 GMT
expires: Mon, 04 Aug 2025 11:11:50 GMT
cache-control: public, max-age=82800
age: 73848
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=l9spxqibkoe9&cd_fexp=72717107&aqid=fXKQaIfyKL7AxdwPlrrl-QM&psid=5837883959&pbt=bs&adbx=375&adby=217&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=788436323&csala=7%7C0%7C298%7C124%7C175&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-zbxMisJUxWBnNJoDUZRoTg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
permissions-policy: unload=()
date: Mon, 04 Aug 2025 08:42:39 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET / HTTP/1.1
Host: lzvsswww.backup.viplogin4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50550"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Mon, 04 Aug 2025 08:42:36 GMT
server: nginx
vary: Accept-Encoding
via: 1.1 Caddy, 0.0 Caddy
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_lHe/jkKClmilWXMr9DBBMWD4jMToSFG/8Q++AURzcln/6mPDgwBLu7dJVpoKCeVrL5qUhgDDA2mB7BLEUdXX+A==
x-buckets: bucket003,bucket077
x-domain: viplogin4.com
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: lzvsswww.backup
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2

GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Mon, 04 Aug 2025 05:29:31 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 be3750c9aa69fd9d53a35aea8d9dab16.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: AelvfN4UYGiX5prTSelb_JPuuKVeDhKdIEhM_xz4JgWzdiLMDQWHCQ==
age: 11586
X-Firefox-Spdy: h2

GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://lzvsswww.backup.viplogin4.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 04 Aug 2025 08:42:37 GMT
expires: Mon, 04 Aug 2025 08:42:37 GMT
cache-control: private, max-age=3600
etag: "629193619360999104"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2