| obseu.astarsbuilding.com/mon |  3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1739
Origin: http://ww12.avxx-179.xyz
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.avxx-179.xyz
content-type: application/json
date: Fri, 09 May 2025 12:36:15 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| ww12.avxx-179.xyz/?usid=24&utid=12007919278 |  76.223.26.96 | 200 OK | 7.1 kB |
URL User Request GET ww12.avxx-179.xyz/?usid=24&utid=12007919278 IP76.223.26.96:80
File typeHTML document, ASCII text Hash16f01fa93d5989e8e2647647ef7787f8 08bde0db3f257b0af39db78efdf0b0f169e8f9e2 23b7dcd7d5e8e0386722bf60a5cd8825ffcf35c3a6bb661635b08aab133199ea
GET /?usid=24&utid=12007919278 HTTP/1.1
Host: ww12.avxx-179.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
Accept-Ch-Lifetime: 30
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Fri, 09 May 2025 12:35:58 GMT
Server: Caddy, nginx
Vary: Accept-Encoding
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_UASKV4Bffhv8KuIwqoNILxNExDUYdayOJAM/TIlJolQyoKNOMvH3DNVOjT6LSaPNDhBS5c2fQehRTvGUeuEUUA==
X-Buckets: bucket011,bucket105,bucket088
X-Domain: avxx-179.xyz
X-Language: norwegian
X-Pcrew-Blocked-Reason: hosting network
X-Pcrew-Ip-Organization: Blix Solutions
X-Redirect: zeropark_adult
X-Subdomain: ww12
X-Template: tpl_CleanPeppermintBlack_twoclick
Transfer-Encoding: chunked
|
|
| euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 54.240.174.18 | 200 OK | 112 kB |
URL GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP54.240.174.18:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerAmazon Subject*.astarsbuilding.com FingerprintDD:1E:42:74:B7:0D:4D:51:5C:C2:3A:AF:0C:79:1A:F5:AA:7C:06:D5 ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size112 kB (111620 bytes) Hash5d32edfdd5eb814ac05e5087ac512325 0c3fdce821e9fe7c8c86c144696b6dedd351b6ac 4ade4714bca4cc899e1480079c3c6d5e302d1f2760cc249f799cc941075754f1
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40958
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Fri, 09 May 2025 12:14:24 GMT
expires: Sat, 10 May 2025 00:14:24 GMT
etag: "1b404-DD/c6CHp/nyMhsFEaWtt7dNRtqw"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lIQja7bzl5bpfEWTIgfETSttAikIp80eg2aYuvi0OgfSWPPr0F9EGQ==
age: 1295
X-Firefox-Spdy: h2
|
|
| parking3.parklogic.com/page/enhance.js?pcId=12&domain=avxx-179.xyz | 172.232.7.47 | 200 OK | 2.2 kB |
URL GET parking3.parklogic.com/page/enhance.js?pcId=12&domain=avxx-179.xyz IP172.232.7.47:443 ASN#63949 Akamai Connected Cloud
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerLet's Encrypt Subjectenhance-lb01.parklogic.com FingerprintA9:52:EB:46:72:F6:AB:43:E9:BC:07:14:2E:C8:58:DD:ED:1B:9A:51 ValidityMon, 31 Mar 2025 01:04:57 GMT - Sun, 29 Jun 2025 01:04:56 GMT
File typeJavaScript source, ASCII text Hashfddbe84822cfca84dd9434e82db81d74 38bf6a6829c7f6f5b2132995d68a2d94df5b686a 31ee164aae16d12023e3226db6e2a6d631be9df953d0c0e46516272b5cfed363
GET /page/enhance.js?pcId=12&domain=avxx-179.xyz HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 12:35:59 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| parking3.parklogic.com/page/scribe.php?pcId=12&domain=avxx-179.xyz&aId=111&pId=451&usid=24&utid=12007919278&query=null&domainJs=ww12.avxx-179.xyz&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null | 172.232.7.47 | 200 OK | 0 B |
URL GET parking3.parklogic.com/page/scribe.php?pcId=12&domain=avxx-179.xyz&aId=111&pId=451&usid=24&utid=12007919278&query=null&domainJs=ww12.avxx-179.xyz&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null IP172.232.7.47:443 ASN#63949 Akamai Connected Cloud
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerLet's Encrypt Subjectenhance-lb01.parklogic.com FingerprintA9:52:EB:46:72:F6:AB:43:E9:BC:07:14:2E:C8:58:DD:ED:1B:9A:51 ValidityMon, 31 Mar 2025 01:04:57 GMT - Sun, 29 Jun 2025 01:04:56 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /page/scribe.php?pcId=12&domain=avxx-179.xyz&aId=111&pId=451&usid=24&utid=12007919278&query=null&domainJs=ww12.avxx-179.xyz&path=/&ss=true&lp=1&tzB=UTC&wd=false&gpu=null HTTP/1.1
Host: parking3.parklogic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ww12.avxx-179.xyz/
Origin: http://ww12.avxx-179.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 09 May 2025 12:35:59 GMT
content-type: text/html; charset=UTF-8
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2552
Origin: http://ww12.avxx-179.xyz
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.avxx-179.xyz
content-type: application/json
date: Fri, 09 May 2025 12:36:01 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1739
Origin: http://ww12.avxx-179.xyz
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.avxx-179.xyz
content-type: application/json
date: Fri, 09 May 2025 12:36:10 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| | 72.52.178.23 | 302 Found | 7.1 kB |
IP72.52.178.23:443
CertificateIssuerLet's Encrypt Subjectavxx-179.xyz Fingerprint7B:4B:54:D0:6B:3D:0D:4F:DB:36:E0:23:8E:DA:0F:3D:24:29:22:6D ValidityThu, 10 Apr 2025 14:42:25 GMT - Wed, 09 Jul 2025 14:42:24 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: avxx-179.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 09 May 2025 12:35:57 GMT
content-type: text/html
content-length: 0
location: http://ww12.avxx-179.xyz/?usid=24&utid=12007919278
cache-control: no-cache
pragma: no-cache
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| ww12.avxx-179.xyz/favicon.ico | 76.223.26.96 | 200 OK | 0 B |
URL GET ww12.avxx-179.xyz/favicon.ico IP76.223.26.96:80
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww12.avxx-179.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/?usid=24&utid=12007919278
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Length: 0
Content-Type: image/x-icon
Date: Fri, 09 May 2025 12:35:59 GMT
Etag: "670f7248-0"
Last-Modified: Wed, 16 Oct 2024 07:59:04 GMT
Server: Caddy, nginx
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlackConsent_657d9013/img/arrows.png | 18.165.132.97 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlackConsent_657d9013/img/arrows.png IP18.165.132.97:80
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlackConsent_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 11375
Connection: keep-alive
Server: nginx
Date: Fri, 09 May 2025 01:16:58 GMT
Accept-Ranges: bytes
Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT
ETag: "czzekhpx1ebk8rz"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 1a22e1ab5b2ff0e98d5eb7b20e352432.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: HEL51-P2
X-Amz-Cf-Id: SiOcML4mFnxoKqwtZbcw5UEV9f7otiL-FZd9bPOqF7aiEUHXHju9VQ==
Age: 40741
|
|
| obseu.astarsbuilding.com/ct?id=80705&url=http%3A%2F%2Fww12.avxx-179.xyz%2F%3Fusid%3D24%26utid%3D12007919278&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=8780cff2b5f03872dd578954fb53c254b4f26161&tsf=0&tsfmi=&tsfu=&cb=1746794159865&hl=2&op=0&ag=2881387774&rand=0411120819890299525768071071222256962627862062962012656068277170886750810051913981515875&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=nEcjbdg5As&pto=2594&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746794159.a0onmEFYv8w9nzga&suid=1.1746794159.H1UGE0ACyW3jtj2y&tuid=1.1746794159.qUJ4xFgKSkx3i7K9&fbc=->m=-&it=7%2C1626%2C153&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D | 3.248.162.96 | 200 OK | 3.5 kB |
URL GET obseu.astarsbuilding.com/ct?id=80705&url=http%3A%2F%2Fww12.avxx-179.xyz%2F%3Fusid%3D24%26utid%3D12007919278&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=8780cff2b5f03872dd578954fb53c254b4f26161&tsf=0&tsfmi=&tsfu=&cb=1746794159865&hl=2&op=0&ag=2881387774&rand=0411120819890299525768071071222256962627862062962012656068277170886750810051913981515875&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=nEcjbdg5As&pto=2594&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746794159.a0onmEFYv8w9nzga&suid=1.1746794159.H1UGE0ACyW3jtj2y&tuid=1.1746794159.qUJ4xFgKSkx3i7K9&fbc=->m=-&it=7%2C1626%2C153&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3469), with no line terminators Hashcead8d9d870b063abfc4b3ae3915633e e4e1695f2f2a69621b58547ac52ef416ebad7a34 63090c333e5904be89d57f099bc07a01eff1abf3910dc1c87168ef8552c665ac
GET /ct?id=80705&url=http%3A%2F%2Fww12.avxx-179.xyz%2F%3Fusid%3D24%26utid%3D12007919278&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=8780cff2b5f03872dd578954fb53c254b4f26161&tsf=0&tsfmi=&tsfu=&cb=1746794159865&hl=2&op=0&ag=2881387774&rand=0411120819890299525768071071222256962627862062962012656068277170886750810051913981515875&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=&ss=1280x1024&nc=0&at=&di=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%3D&dep=0&pre=0&sdd=&cri=nEcjbdg5As&pto=2594&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746794159.a0onmEFYv8w9nzga&suid=1.1746794159.H1UGE0ACyW3jtj2y&tuid=1.1746794159.qUJ4xFgKSkx3i7K9&fbc=->m=-&it=7%2C1626%2C153&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Fri, 09 May 2025 12:36:00 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a; Max-Age=29030400; Path=/; Expires=Fri, 10 Apr 2026 12:36:00 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: http://ww12.avxx-179.xyz
content-length: 1186
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/tracker/tc_imp.gif?e=37dfbd8ee84e00126ee8c03cee468c9d9225c24f567d43d6da1908be6245cad7bd70a976750ef80ed89373bfe70e9c20c1e53e8d56118a6d2217071a10acf9f29f671d83848b027d3649fa7d2305866a8a309257335472945a560e330c5dc2ec691e77be26bb25cb43e29a3aee5b6fb2092f6410df57fe5aecd2948a7fe07f52a13ad2a24710d14e681f2d1586d31c64e56ac8bf88b71208fe59f1d329e921c46bcf40e25c7ea8290ee95c400027db0b68acdebff079ef64fd718940a8116e71b9d637793a7a589513d0df4ca65b7de792b226537a30ca946c75ca92560c2247790758a0867a692b02a7ff1a2f88f9a17a97b45d74492df9a6a6919925bdcfc248b5038e523d65cceb92a9e471d280f061856b4a95b9c3330751b0606db6c1522ca6c5fa738618b70ff89b17870c929b72c63c23d3dd7e8c6891d0e8f388e6e21028f127a4a7e87d0426b6d27f82f617e206195fc5575984d3cd88c0bcdd70e40790d0f58838b62c3574937b6bccc2df0e37d7ec74bb11e0830dce37ef33024a5e8c6eff2edad68878b68c7a885ee182d3d86c821b0b2ff35d185575457bd5af66b3059a8c8b27b19560fe8627d78ea9a63d83f0a91f637da9e75543d7a1225c42acacad74b828ccb82fb3b97bec38d9658759c609c5b42e854635eec591673c2361032a0b5c0babe18c6eda1eb6454e402be4b54fdf9b1010faa4c2bbbe64def0e7f481e4b2f24d4b20e64184b6457384426407ca645c7570eb7daf7705dfedc167e77cc571cef278dfb21f98650e2624047b1a98c1e1d2222a55c54618e0a5b0fdb88d5a5bd4e7ec6f8add303e818600367bf88fd85125b1208c5b9e1fea21e313bebf66f8cb41abfc8b88dc1d60a6f22771c633ffd9a2a1049d72351101926f4a54b0a65691ad71b09dd3be03b6e4dc7b0d6e40c534b919b817f2d77b9c592e3d53783926f3508e9d2101e82b91dbaa66888b14d32a11fa462573c1fadb0846fc25a0cc02d004300356ae7b71d3bddd69d7457ec7d051b3d5defe835ec81d086007f8773940c3d35f0da836e6e2d372cc80b94c4f76a16b231416905403a48be4180d823b2786858d40d5c6eb8c4b28bf30b8076e4ade0c672693c20e1fce8abfcaf0eb50987ad4328a769ad65c93fff27d66b3c5158f&cri=nEcjbdg5As&ts=220&cb=1746794160085 | 3.248.162.96 | 200 OK | 43 B |
URL GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=nEcjbdg5As&ts=220&cb=1746794160085 IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=nEcjbdg5As&ts=220&cb=1746794160085 HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 09 May 2025 12:36:00 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1736
Origin: http://ww12.avxx-179.xyz
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.avxx-179.xyz
content-type: application/json
date: Fri, 09 May 2025 12:36:03 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 3.248.162.96 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP3.248.162.96:443
Requested byhttp://ww12.avxx-179.xyz/?usid=24&utid=12007919278 CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1736
Origin: http://ww12.avxx-179.xyz
DNT: 1
Connection: keep-alive
Referer: http://ww12.avxx-179.xyz/
Cookie: cg_uuid=d1725a9b45d11aebec3aa78fa6824b2a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: http://ww12.avxx-179.xyz
content-type: application/json
date: Fri, 09 May 2025 12:36:05 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|