| ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar |  76.223.26.96 | 200 OK | 17 kB |
URL User Request GET ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar IP76.223.26.96:443
CertificateIssuerLet's Encrypt Subjectww38.down1.3ddown.com Fingerprint4C:AB:D6:3C:E1:DC:EE:6A:9E:3B:6F:BB:CF:C4:58:CE:F8:2F:33:AB ValiditySat, 01 Mar 2025 12:05:26 GMT - Fri, 30 May 2025 12:05:25 GMT
File typeHTML document, ASCII text, with very long lines (9188) Hashcf7713177193a40c4aae16cc5a7ede9a 675eb245c9517d57d9aa44c45ca85330a5031e09 1f50cef2b77ca93949f0aa5fec2fc20283e14705d147768f5444d58d19fe72d8
GET /down/2009/02b/xdcc.catcher.pro.v2.3.0.rar HTTP/1.1
Host: ww38.down1.3ddown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 09 May 2025 19:41:15 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_Mjtxys642efMiOfsVc+IH/app+Kb7Rl84PSjljCE5x+yhjTgjotea2SnYnhLHRNyxBzFrJ4XV6eO+ztVGmapyg==
x-buckets: bucket003,bucket077
x-domain: 3ddown.com
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: ww38.down1
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
|
|
| ww38.down1.3ddown.com/munin/a/ls?t=681e5a5b&token=505c6591ce98629761acbdfa149284cded6fba33 | 76.223.26.96 | 201 Created | 0 B |
URL GET ww38.down1.3ddown.com/munin/a/ls?t=681e5a5b&token=505c6591ce98629761acbdfa149284cded6fba33 IP76.223.26.96:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerLet's Encrypt Subjectww38.down1.3ddown.com Fingerprint4C:AB:D6:3C:E1:DC:EE:6A:9E:3B:6F:BB:CF:C4:58:CE:F8:2F:33:AB ValiditySat, 01 Mar 2025 12:05:26 GMT - Fri, 30 May 2025 12:05:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=681e5a5b&token=505c6591ce98629761acbdfa149284cded6fba33 HTTP/1.1
Host: ww38.down1.3ddown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Fri, 09 May 2025 19:41:15 GMT
server: Caddy, nginx
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_EZVxfaZ6OdQbwszkO5kEqjZdZUNLlG+7MM+vInd+5EIEs2HWtOq88mkmi+WBC6lnobG+6FYOpE09pi4WsgfqtQ==
x-log-success: 681e5a5bbc9786c9dd08ef13
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/ct?id=80705&url=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=505c6591ce98629761acbdfa149284cded6fba33&tsf=0&tsfmi=&tsfu=&cb=1746819676538&hl=2&op=0&ag=2881387774&rand=8452809055152595511168529896170661750215797262227192959686172799810225022080213220069021&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=&cri=ytQIjJ7fSb&pto=1583&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746819676.cvYrKiQVTPPvXBY8&suid=1.1746819676.tfLkTvjCoxJ6Recs&tuid=1.1746819676.0cAwHpE83mPbKDPo&fbc=->m=-&it=10%2C473%2C71&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D |  34.251.101.162 | 200 OK | 3.6 kB |
URL GET obseu.astarsbuilding.com/ct?id=80705&url=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=505c6591ce98629761acbdfa149284cded6fba33&tsf=0&tsfmi=&tsfu=&cb=1746819676538&hl=2&op=0&ag=2881387774&rand=8452809055152595511168529896170661750215797262227192959686172799810225022080213220069021&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=&cri=ytQIjJ7fSb&pto=1583&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746819676.cvYrKiQVTPPvXBY8&suid=1.1746819676.tfLkTvjCoxJ6Recs&tuid=1.1746819676.0cAwHpE83mPbKDPo&fbc=->m=-&it=10%2C473%2C71&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3553), with no line terminators Hash6d1fe6cb5b5c6ba462f9db98fc0fc8c7 df4ae2b57813bd7e1633d334e35ceaa5a72f0422 1a57c31e956855759b9d9efa53d52a410c06a0f4635657de8a6385105b9cbd31
GET /ct?id=80705&url=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=505c6591ce98629761acbdfa149284cded6fba33&tsf=0&tsfmi=&tsfu=&cb=1746819676538&hl=2&op=0&ag=2881387774&rand=8452809055152595511168529896170661750215797262227192959686172799810225022080213220069021&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=&cri=ytQIjJ7fSb&pto=1583&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746819676.cvYrKiQVTPPvXBY8&suid=1.1746819676.tfLkTvjCoxJ6Recs&tuid=1.1746819676.0cAwHpE83mPbKDPo&fbc=->m=-&it=10%2C473%2C71&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Fri, 09 May 2025 19:41:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867; Max-Age=29030400; Path=/; Expires=Fri, 10 Apr 2026 19:41:16 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://ww38.down1.3ddown.com
content-length: 1212
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.down1.3ddown.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tbUtKiSZiJTjd8sL7oWdgUQ_3MQ2TEJIBREgK9Kuw1ivYXss6ISJ5A.TW2onD7vKg9sLtNDBzPAPg.DaTQFIud_CDr5O9riMpJKI2O7kGuJOFN248sRcTkNmWveQ_3qetTb-K7RL-t9-SUJmk0QYBSw5ese1qi1hSwTawlixWB-pTJVklZje81ygiGjg8esgNnN9uhserCeNDpljsg-ETQJXuWLAhEojSSQ1h8A1R05x9pOg4e--8gOHZA951FNAO0IErUDC0-pMPL10BXQTSrXJbjMzY5PZtCAj-m524J-UiCu6LP-EGN1TZiGHqIAh_uVIcqQ4CQMXUE_QRgO6tu1DqI5FvLUCjV2MGowIsbliFJFjFNbQFnPgwvyvEkzf9Dcc_2m50711lBY9WBNJJPXHPEAROwNGkVgsI-c5PInw58Wc93wRInwhQdmYJhaG4TDzZydCncfVDRbHONLgmFiLqbCbAenslR9669yUAptm1IZ_0CmQsleRJmdIaXLP9uxG3GyXE6KwFS4GSHyYzCombjE7GdjgBP9Ut4Ej_mNjLFCwQFFAup0odF-nzLrOIs8wa8KFDNlsJ-5dBz3CwFWcI4b4rVEh0TNu0s21SopK7MpvJVn0smBb5wjwlB1Fi2tW7bfjALyfUwu1oPy-11QKmT6h-Bn_SrRmA240WcQw8fowsFwGRLyVMe8gu-XoLATl2YX2hN2AA4_3Sm7GCEjEm-CumqGhHuQg.AlYwGhuR3uiWEfbBBC6d2g&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2344383531761608&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=4421746819675977&num=0&output=afd_ads&domain_name=ww38.down1.3ddown.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1746819675980&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint88:06:54:F9:FF:71:9C:F6:50:7F:58:EA:5C:98:77:FF:88:95:B5:94 ValidityMon, 21 Apr 2025 08:41:44 GMT - Mon, 14 Jul 2025 08:41:43 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 23:50:43 GMT
expires: Fri, 09 May 2025 22:50:43 GMT
cache-control: public, max-age=82800
age: 71433
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1777
Origin: https://ww38.down1.3ddown.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.down1.3ddown.com
content-type: application/json
date: Fri, 09 May 2025 19:41:21 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ww38.down1.3ddown.com/favicon.ico | 76.223.26.96 | 200 OK | 0 B |
URL GET ww38.down1.3ddown.com/favicon.ico IP76.223.26.96:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerLet's Encrypt Subjectww38.down1.3ddown.com Fingerprint4C:AB:D6:3C:E1:DC:EE:6A:9E:3B:6F:BB:CF:C4:58:CE:F8:2F:33:AB ValiditySat, 01 Mar 2025 12:05:26 GMT - Fri, 30 May 2025 12:05:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww38.down1.3ddown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Fri, 09 May 2025 19:41:15 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=jstj4tfx3nfq&cd_fexp=72717108&aqid=XFoeaPL6CfWkxdwP3_a4gAI&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=10%7C0%7C442%7C99%7C104&lle=0&ifv=1&hpt=1 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=jstj4tfx3nfq&cd_fexp=72717108&aqid=XFoeaPL6CfWkxdwP3_a4gAI&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=10%7C0%7C442%7C99%7C104&lle=0&ifv=1&hpt=1 IP216.58.207.238:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=jstj4tfx3nfq&cd_fexp=72717108&aqid=XFoeaPL6CfWkxdwP3_a4gAI&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=10%7C0%7C442%7C99%7C104&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-QRaUGiMQbieUgnmtXPDtXg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 09 May 2025 19:41:18 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1780
Origin: https://ww38.down1.3ddown.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.down1.3ddown.com
content-type: application/json
date: Fri, 09 May 2025 19:41:26 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1777
Origin: https://ww38.down1.3ddown.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.down1.3ddown.com
content-type: application/json
date: Fri, 09 May 2025 19:41:19 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1780
Origin: https://ww38.down1.3ddown.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.down1.3ddown.com
content-type: application/json
date: Fri, 09 May 2025 19:41:31 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ww38.down1.3ddown.com/munin/a/tr/browserjs?domain=3ddown.com&toggle=browserjs&uid=MTc0NjgxOTY3NS4wOTgxOmI5NjdhMjU3ZjNkY2QxZmM1ZDNjNTQ5OTQyNzUzN2JmNmEyZTExMTk2MTliYzNjMjkwNDM1YzZlMzdjYzJjOGY6NjgxZTVhNWIxN2Y2MQ%3D%3D | 76.223.26.96 | 200 OK | 0 B |
URL GET ww38.down1.3ddown.com/munin/a/tr/browserjs?domain=3ddown.com&toggle=browserjs&uid=MTc0NjgxOTY3NS4wOTgxOmI5NjdhMjU3ZjNkY2QxZmM1ZDNjNTQ5OTQyNzUzN2JmNmEyZTExMTk2MTliYzNjMjkwNDM1YzZlMzdjYzJjOGY6NjgxZTVhNWIxN2Y2MQ%3D%3D IP76.223.26.96:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerLet's Encrypt Subjectww38.down1.3ddown.com Fingerprint4C:AB:D6:3C:E1:DC:EE:6A:9E:3B:6F:BB:CF:C4:58:CE:F8:2F:33:AB ValiditySat, 01 Mar 2025 12:05:26 GMT - Fri, 30 May 2025 12:05:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=3ddown.com&toggle=browserjs&uid=MTc0NjgxOTY3NS4wOTgxOmI5NjdhMjU3ZjNkY2QxZmM1ZDNjNTQ5OTQyNzUzN2JmNmEyZTExMTk2MTliYzNjMjkwNDM1YzZlMzdjYzJjOGY6NjgxZTVhNWIxN2Y2MQ%3D%3D HTTP/1.1
Host: ww38.down1.3ddown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Fri, 09 May 2025 19:41:15 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
|
|
| euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 54.240.174.46 | 200 OK | 112 kB |
URL GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP54.240.174.46:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerAmazon Subject*.astarsbuilding.com FingerprintDD:1E:42:74:B7:0D:4D:51:5C:C2:3A:AF:0C:79:1A:F5:AA:7C:06:D5 ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size112 kB (111620 bytes) Hash5d32edfdd5eb814ac05e5087ac512325 0c3fdce821e9fe7c8c86c144696b6dedd351b6ac 4ade4714bca4cc899e1480079c3c6d5e302d1f2760cc249f799cc941075754f1
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40958
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Fri, 09 May 2025 12:14:24 GMT
expires: Sat, 10 May 2025 00:14:24 GMT
etag: "1b404-DD/c6CHp/nyMhsFEaWtt7dNRtqw"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uUGqOiPQCpXmr9iveubZxN0K5T8i6H3Z_i3POAUIugFQuswOdIxFjg==
age: 26811
X-Firefox-Spdy: h2
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png | 3.167.7.13 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP3.167.7.13:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Fri, 09 May 2025 11:05:13 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: vWw5q_0nmjtHBI10hHjqydoNK7GnE6NKdsM74dpqR5Mu59uUp1xHbQ==
age: 30962
X-Firefox-Spdy: h2
|
|
| ww38.down1.3ddown.com/munin/a/tr/answercheck/yes?domain=3ddown.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0NjgxOTY3NS4wOTgxOmI5NjdhMjU3ZjNkY2QxZmM1ZDNjNTQ5OTQyNzUzN2JmNmEyZTExMTk2MTliYzNjMjkwNDM1YzZlMzdjYzJjOGY6NjgxZTVhNWIxN2Y2MQ%3D%3D | 76.223.26.96 | 200 OK | 0 B |
URL GET ww38.down1.3ddown.com/munin/a/tr/answercheck/yes?domain=3ddown.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0NjgxOTY3NS4wOTgxOmI5NjdhMjU3ZjNkY2QxZmM1ZDNjNTQ5OTQyNzUzN2JmNmEyZTExMTk2MTliYzNjMjkwNDM1YzZlMzdjYzJjOGY6NjgxZTVhNWIxN2Y2MQ%3D%3D IP76.223.26.96:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerLet's Encrypt Subjectww38.down1.3ddown.com Fingerprint4C:AB:D6:3C:E1:DC:EE:6A:9E:3B:6F:BB:CF:C4:58:CE:F8:2F:33:AB ValiditySat, 01 Mar 2025 12:05:26 GMT - Fri, 30 May 2025 12:05:25 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/answercheck/yes?domain=3ddown.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0NjgxOTY3NS4wOTgxOmI5NjdhMjU3ZjNkY2QxZmM1ZDNjNTQ5OTQyNzUzN2JmNmEyZTExMTk2MTliYzNjMjkwNDM1YzZlMzdjYzJjOGY6NjgxZTVhNWIxN2Y2MQ%3D%3D HTTP/1.1
Host: ww38.down1.3ddown.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar
Cookie: _cq_duid=1.1746819676.cvYrKiQVTPPvXBY8; _cq_suid=1.1746819676.tfLkTvjCoxJ6Recs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Fri, 09 May 2025 19:41:16 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126ee8cf34e3418d9b9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f671fd7d68c0f2d364ff7297651816a8b33c350390576945a035a335658c1b66d4877be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c7b1777075eafdf7f357e53a4fc4c7d84ada12698e45d70482efda3f4979a75e8cfc248b5038e523d65cceb92a9e471d280f061856b4a95b98a260709b0266ca08e403ba986fa6a8c52ab19f5da06911096d02b9b7f6b899b27d86c8fd2eaa190a7b74a79e87ce7ffa9710476a29321cfaa04b15b451fd74318d492c38681fa827090799edea58f7bff717774dc2978c5dad14f6788a85f8641a9d34dd62fff33025c578c6ee9439cd7a97bbf9728c00ca7d79c9b29ce584e2da51e37556f6f79c9a721fb07d2c18827ae9227b2d222d98eeff5718aa2e45a613ec6a95247cfbc0c5914ffe1ee74ae28c4f840fdb77fc120f964cb17ad40c5a22eda083bf6f8c0156366355d6e720805a0f3917ece10f5195c4942fbb54cc399180cfeb8c3bbbc6cc0e5f8fd86f8acf3574e3cfb448eaa5d729e426713cb7e5e796bea66ac701ddef6c7618a7cca228aaa30d0bf0c9d6712272003600e9ac0e0b6206901df411187d9cbbaaecb540198b8bc7490c875658b947b7e12a0f0bf3241d761ed2df612f12389519e9147eab020e38589d59c416aeee93d648468e2dbccf072da3647494dee6e2105e2e04d93fe508fc0cfda5edf869932093341b63ca203ad53ac813ae7753b6134327e228108f5f5530aab73d2e5b563cbc526e16861ed55253e95e8cd180ebf35a4f24f8956755915e25979d5f68836d95d3c869747f49dcff58343d941476248a3652f5380824c01ef7ef5f4c22c8ccffe4e003eb060201416905403b78be4190d823d3280c2c553c3d7bbcc4530e573e845785ccc5231268385164b8acaf187a1a019e43aa56ed139d3cd469dabea2169aada1cde8ce7f1bdb3a4916b11d7bf7b028935c45bc11db4a9&cri=ytQIjJ7fSb&ts=246&cb=1746819676784 | 34.251.101.162 | 200 OK | 43 B |
URL GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=ytQIjJ7fSb&ts=246&cb=1746819676784 IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=ytQIjJ7fSb&ts=246&cb=1746819676784 HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 09 May 2025 19:41:16 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true | 142.250.74.68 | 200 OK | 143 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP142.250.74.68:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintC0:9B:21:A5:10:36:7E:DC:25:8D:0B:AB:4B:D9:D7:AD:92:06:96:49 ValidityMon, 21 Apr 2025 08:42:35 GMT - Mon, 14 Jul 2025 08:42:34 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size143 kB (143318 bytes) Hash3304efd24dfa8c4c7ce40f3de600b4e9 03123332d63cb05c2e839167db15d213579b351d 0c52f00df6667982d053daab715ab61912b336347026c51bfb3afd401213a787
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 09 May 2025 19:41:15 GMT
expires: Fri, 09 May 2025 19:41:15 GMT
cache-control: private, max-age=3600
etag: "4995297505324853359"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.down1.3ddown.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tbUtKiSZiJTjd8sL7oWdgUQ_3MQ2TEJIBREgK9Kuw1ivYXss6ISJ5A.TW2onD7vKg9sLtNDBzPAPg.DaTQFIud_CDr5O9riMpJKI2O7kGuJOFN248sRcTkNmWveQ_3qetTb-K7RL-t9-SUJmk0QYBSw5ese1qi1hSwTawlixWB-pTJVklZje81ygiGjg8esgNnN9uhserCeNDpljsg-ETQJXuWLAhEojSSQ1h8A1R05x9pOg4e--8gOHZA951FNAO0IErUDC0-pMPL10BXQTSrXJbjMzY5PZtCAj-m524J-UiCu6LP-EGN1TZiGHqIAh_uVIcqQ4CQMXUE_QRgO6tu1DqI5FvLUCjV2MGowIsbliFJFjFNbQFnPgwvyvEkzf9Dcc_2m50711lBY9WBNJJPXHPEAROwNGkVgsI-c5PInw58Wc93wRInwhQdmYJhaG4TDzZydCncfVDRbHONLgmFiLqbCbAenslR9669yUAptm1IZ_0CmQsleRJmdIaXLP9uxG3GyXE6KwFS4GSHyYzCombjE7GdjgBP9Ut4Ej_mNjLFCwQFFAup0odF-nzLrOIs8wa8KFDNlsJ-5dBz3CwFWcI4b4rVEh0TNu0s21SopK7MpvJVn0smBb5wjwlB1Fi2tW7bfjALyfUwu1oPy-11QKmT6h-Bn_SrRmA240WcQw8fowsFwGRLyVMe8gu-XoLATl2YX2hN2AA4_3Sm7GCEjEm-CumqGhHuQg.AlYwGhuR3uiWEfbBBC6d2g&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2344383531761608&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=4421746819675977&num=0&output=afd_ads&domain_name=ww38.down1.3ddown.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1746819675980&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar | 216.58.207.238 | 200 OK | 16 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.down1.3ddown.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tbUtKiSZiJTjd8sL7oWdgUQ_3MQ2TEJIBREgK9Kuw1ivYXss6ISJ5A.TW2onD7vKg9sLtNDBzPAPg.DaTQFIud_CDr5O9riMpJKI2O7kGuJOFN248sRcTkNmWveQ_3qetTb-K7RL-t9-SUJmk0QYBSw5ese1qi1hSwTawlixWB-pTJVklZje81ygiGjg8esgNnN9uhserCeNDpljsg-ETQJXuWLAhEojSSQ1h8A1R05x9pOg4e--8gOHZA951FNAO0IErUDC0-pMPL10BXQTSrXJbjMzY5PZtCAj-m524J-UiCu6LP-EGN1TZiGHqIAh_uVIcqQ4CQMXUE_QRgO6tu1DqI5FvLUCjV2MGowIsbliFJFjFNbQFnPgwvyvEkzf9Dcc_2m50711lBY9WBNJJPXHPEAROwNGkVgsI-c5PInw58Wc93wRInwhQdmYJhaG4TDzZydCncfVDRbHONLgmFiLqbCbAenslR9669yUAptm1IZ_0CmQsleRJmdIaXLP9uxG3GyXE6KwFS4GSHyYzCombjE7GdjgBP9Ut4Ej_mNjLFCwQFFAup0odF-nzLrOIs8wa8KFDNlsJ-5dBz3CwFWcI4b4rVEh0TNu0s21SopK7MpvJVn0smBb5wjwlB1Fi2tW7bfjALyfUwu1oPy-11QKmT6h-Bn_SrRmA240WcQw8fowsFwGRLyVMe8gu-XoLATl2YX2hN2AA4_3Sm7GCEjEm-CumqGhHuQg.AlYwGhuR3uiWEfbBBC6d2g&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2344383531761608&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=4421746819675977&num=0&output=afd_ads&domain_name=ww38.down1.3ddown.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1746819675980&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar IP216.58.207.238:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (15475) Hash7857affd72c3584910a0138ac19325fd c53e2f25ff44b7c39098323df4d2e435f2f6c5f8 2aa5ecfb4ecce58308c7cb2ee1e07b4eb939b5e4b977f178afc2cedc1baaf910
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.down1.3ddown.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tbUtKiSZiJTjd8sL7oWdgUQ_3MQ2TEJIBREgK9Kuw1ivYXss6ISJ5A.TW2onD7vKg9sLtNDBzPAPg.DaTQFIud_CDr5O9riMpJKI2O7kGuJOFN248sRcTkNmWveQ_3qetTb-K7RL-t9-SUJmk0QYBSw5ese1qi1hSwTawlixWB-pTJVklZje81ygiGjg8esgNnN9uhserCeNDpljsg-ETQJXuWLAhEojSSQ1h8A1R05x9pOg4e--8gOHZA951FNAO0IErUDC0-pMPL10BXQTSrXJbjMzY5PZtCAj-m524J-UiCu6LP-EGN1TZiGHqIAh_uVIcqQ4CQMXUE_QRgO6tu1DqI5FvLUCjV2MGowIsbliFJFjFNbQFnPgwvyvEkzf9Dcc_2m50711lBY9WBNJJPXHPEAROwNGkVgsI-c5PInw58Wc93wRInwhQdmYJhaG4TDzZydCncfVDRbHONLgmFiLqbCbAenslR9669yUAptm1IZ_0CmQsleRJmdIaXLP9uxG3GyXE6KwFS4GSHyYzCombjE7GdjgBP9Ut4Ej_mNjLFCwQFFAup0odF-nzLrOIs8wa8KFDNlsJ-5dBz3CwFWcI4b4rVEh0TNu0s21SopK7MpvJVn0smBb5wjwlB1Fi2tW7bfjALyfUwu1oPy-11QKmT6h-Bn_SrRmA240WcQw8fowsFwGRLyVMe8gu-XoLATl2YX2hN2AA4_3Sm7GCEjEm-CumqGhHuQg.AlYwGhuR3uiWEfbBBC6d2g&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2344383531761608&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=4421746819675977&num=0&output=afd_ads&domain_name=ww38.down1.3ddown.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1746819675980&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Fri, 09 May 2025 19:41:16 GMT
expires: Fri, 09 May 2025 19:41:16 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-CuyP1o-yI3Kcdb5fLqtTTw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3607
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 216.58.207.238 | 200 OK | 143 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP216.58.207.238:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.down1.3ddown.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tbUtKiSZiJTjd8sL7oWdgUQ_3MQ2TEJIBREgK9Kuw1ivYXss6ISJ5A.TW2onD7vKg9sLtNDBzPAPg.DaTQFIud_CDr5O9riMpJKI2O7kGuJOFN248sRcTkNmWveQ_3qetTb-K7RL-t9-SUJmk0QYBSw5ese1qi1hSwTawlixWB-pTJVklZje81ygiGjg8esgNnN9uhserCeNDpljsg-ETQJXuWLAhEojSSQ1h8A1R05x9pOg4e--8gOHZA951FNAO0IErUDC0-pMPL10BXQTSrXJbjMzY5PZtCAj-m524J-UiCu6LP-EGN1TZiGHqIAh_uVIcqQ4CQMXUE_QRgO6tu1DqI5FvLUCjV2MGowIsbliFJFjFNbQFnPgwvyvEkzf9Dcc_2m50711lBY9WBNJJPXHPEAROwNGkVgsI-c5PInw58Wc93wRInwhQdmYJhaG4TDzZydCncfVDRbHONLgmFiLqbCbAenslR9669yUAptm1IZ_0CmQsleRJmdIaXLP9uxG3GyXE6KwFS4GSHyYzCombjE7GdjgBP9Ut4Ej_mNjLFCwQFFAup0odF-nzLrOIs8wa8KFDNlsJ-5dBz3CwFWcI4b4rVEh0TNu0s21SopK7MpvJVn0smBb5wjwlB1Fi2tW7bfjALyfUwu1oPy-11QKmT6h-Bn_SrRmA240WcQw8fowsFwGRLyVMe8gu-XoLATl2YX2hN2AA4_3Sm7GCEjEm-CumqGhHuQg.AlYwGhuR3uiWEfbBBC6d2g&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2344383531761608&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=4421746819675977&num=0&output=afd_ads&domain_name=ww38.down1.3ddown.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1746819675980&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size143 kB (143334 bytes) Hash54613114aec3fd68300d7ce4dc4c4d66 91e2d0576f1c282d879d522bd24f49afa0fbb0e6 cd613d5477638318a647d4045b6a40a783cbf84d278d7f6209379a5f50f7597f
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 09 May 2025 19:41:16 GMT
expires: Fri, 09 May 2025 19:41:16 GMT
cache-control: private, max-age=3600
etag: "2195586519495909860"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 391 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww38.down1.3ddown.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.tbUtKiSZiJTjd8sL7oWdgUQ_3MQ2TEJIBREgK9Kuw1ivYXss6ISJ5A.TW2onD7vKg9sLtNDBzPAPg.DaTQFIud_CDr5O9riMpJKI2O7kGuJOFN248sRcTkNmWveQ_3qetTb-K7RL-t9-SUJmk0QYBSw5ese1qi1hSwTawlixWB-pTJVklZje81ygiGjg8esgNnN9uhserCeNDpljsg-ETQJXuWLAhEojSSQ1h8A1R05x9pOg4e--8gOHZA951FNAO0IErUDC0-pMPL10BXQTSrXJbjMzY5PZtCAj-m524J-UiCu6LP-EGN1TZiGHqIAh_uVIcqQ4CQMXUE_QRgO6tu1DqI5FvLUCjV2MGowIsbliFJFjFNbQFnPgwvyvEkzf9Dcc_2m50711lBY9WBNJJPXHPEAROwNGkVgsI-c5PInw58Wc93wRInwhQdmYJhaG4TDzZydCncfVDRbHONLgmFiLqbCbAenslR9669yUAptm1IZ_0CmQsleRJmdIaXLP9uxG3GyXE6KwFS4GSHyYzCombjE7GdjgBP9Ut4Ej_mNjLFCwQFFAup0odF-nzLrOIs8wa8KFDNlsJ-5dBz3CwFWcI4b4rVEh0TNu0s21SopK7MpvJVn0smBb5wjwlB1Fi2tW7bfjALyfUwu1oPy-11QKmT6h-Bn_SrRmA240WcQw8fowsFwGRLyVMe8gu-XoLATl2YX2hN2AA4_3Sm7GCEjEm-CumqGhHuQg.AlYwGhuR3uiWEfbBBC6d2g&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2344383531761608&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717108&format=r3%7Cs&nocache=4421746819675977&num=0&output=afd_ads&domain_name=ww38.down1.3ddown.com&v=3&bsl=8&pac=0&u_his=2&u_tz=0&dt=1746819675980&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww38.down1.3ddown.com%2Fdown%2F2009%2F02b%2Fxdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint88:06:54:F9:FF:71:9C:F6:50:7F:58:EA:5C:98:77:FF:88:95:B5:94 ValidityMon, 21 Apr 2025 08:41:44 GMT - Mon, 14 Jul 2025 08:41:43 GMT
File typeSVG Scalable Vector Graphics image Hash8959ddcd9712196961d93f58064ed655 62ab1e38e7e9fbf58a04381b76c2d96a9c829f24 17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 May 2025 22:31:12 GMT
expires: Fri, 09 May 2025 21:31:12 GMT
cache-control: public, max-age=82800
age: 76204
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2563
Origin: https://ww38.down1.3ddown.com
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Cookie: cg_uuid=fee5819d9a1e6ada4d90e78356b77867
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww38.down1.3ddown.com
content-type: application/json
date: Fri, 09 May 2025 19:41:17 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=g6ylhvrve0kf&cd_fexp=72717108&aqid=XFoeaPL6CfWkxdwP3_a4gAI&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=10%7C0%7C442%7C99%7C104&lle=0&ifv=1&hpt=1 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=g6ylhvrve0kf&cd_fexp=72717108&aqid=XFoeaPL6CfWkxdwP3_a4gAI&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=10%7C0%7C442%7C99%7C104&lle=0&ifv=1&hpt=1 IP216.58.207.238:443
Requested byhttps://ww38.down1.3ddown.com/down/2009/02b/xdcc.catcher.pro.v2.3.0.rar CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=g6ylhvrve0kf&cd_fexp=72717108&aqid=XFoeaPL6CfWkxdwP3_a4gAI&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=10%7C0%7C442%7C99%7C104&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww38.down1.3ddown.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-tNGiSYQm95p3VIjGn7MMKQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 09 May 2025 19:41:18 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|