| d38psrni17bvxu.cloudfront.net/fonts/Port_Lligat_Slab/latin.woff2 |  3.167.7.97 | 200 OK | 12 kB |
URL GET d38psrni17bvxu.cloudfront.net/fonts/Port_Lligat_Slab/latin.woff2 IP3.167.7.97:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 11460, version 1.0 Hash530281ca203b403ba954d0652eb4072f 51a62f96562ff94b45a02aee4476abb3518da3bd b938a950c28b1cec409f935d79a2faadd658bb6a461ca3ee8e2f6e2d716511f5
GET /fonts/Port_Lligat_Slab/latin.woff2 HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ww9.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: font/woff
content-length: 11460
server: nginx
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
date: Fri, 09 May 2025 02:50:47 GMT
etag: "czzekhpopbue8uc"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 42b1b4c2d68cc43ab5019609cede1d92.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: jDIkYb7duURC-iWQIqhWPsPTTaUXl40spV3YnvcZz5-x905ggMBAeQ==
age: 75195
access-control-allow-origin: *
access-control-expose-headers: *
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/ct?id=80705&url=https%3A%2F%2Fww9.applicationgrabb.com%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=fef87d9ceef8bb0d3d6e2df73ea6ed4907ba0e94&tsf=0&tsfmi=&tsfu=&cb=1746834243366&hl=3&op=0&ag=2881387774&rand=6318229790815126129681005900199128217172802627121026825528810217268076785762183678158262&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fapplicationgrabb.com%2F&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=&cri=2ygWAiBCDJ&pto=1766&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746834243.9RRCjWOjYTdXoMJP&suid=1.1746834243.BPf0SvTVVlENgpkH&tuid=1.1746834243.LhDw7pOusj5lBcpE&fbc=->m=-&it=10%2C723%2C65&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D |  34.251.101.162 | 200 OK | 3.5 kB |
URL GET obseu.astarsbuilding.com/ct?id=80705&url=https%3A%2F%2Fww9.applicationgrabb.com%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=fef87d9ceef8bb0d3d6e2df73ea6ed4907ba0e94&tsf=0&tsfmi=&tsfu=&cb=1746834243366&hl=3&op=0&ag=2881387774&rand=6318229790815126129681005900199128217172802627121026825528810217268076785762183678158262&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fapplicationgrabb.com%2F&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=&cri=2ygWAiBCDJ&pto=1766&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746834243.9RRCjWOjYTdXoMJP&suid=1.1746834243.BPf0SvTVVlENgpkH&tuid=1.1746834243.LhDw7pOusj5lBcpE&fbc=->m=-&it=10%2C723%2C65&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeJavaScript source, ASCII text, with very long lines (3513), with no line terminators Hash536ab1183e83cfa6657011325fb71e0b 82f46cde9ed0a41f106eaba6ff2d46b383d1c310 41004418a73aac394de889a0958487f53aa9e8aeb1b96f0ab87b23528b701abe
GET /ct?id=80705&url=https%3A%2F%2Fww9.applicationgrabb.com%2F&sf=0&tpi=&ch=AdsDeli%20-%20domain%20-%20landingpage&uvid=fef87d9ceef8bb0d3d6e2df73ea6ed4907ba0e94&tsf=0&tsfmi=&tsfu=&cb=1746834243366&hl=3&op=0&ag=2881387774&rand=6318229790815126129681005900199128217172802627121026825528810217268076785762183678158262&fs=1280x1024&fst=1280x1024&np=linux%20x86_64&nv=&ref=http%3A%2F%2Fapplicationgrabb.com%2F&ss=1280x1024&nc=0&at=&di=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&dep=0&pre=0&sdd=&cri=2ygWAiBCDJ&pto=1766&ver=65&gac=-&mei=&ap=&fe=1&duid=1.1746834243.9RRCjWOjYTdXoMJP&suid=1.1746834243.BPf0SvTVVlENgpkH&tuid=1.1746834243.LhDw7pOusj5lBcpE&fbc=->m=-&it=10%2C723%2C65&fbcl=-&gacl=-&gacsd=-&rtic=-&rtict=-&bgc=-&spa=1&urid=0&ab=&sck=-&io=aGA2Og%3D%3D HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-encoding: gzip
content-type: text/javascript
date: Fri, 09 May 2025 23:44:03 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
set-cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d; Max-Age=29030400; Path=/; Expires=Fri, 10 Apr 2026 23:44:03 GMT; HttpOnly; Secure; SameSite=None
timing-allow-origin: https://ww9.applicationgrabb.com
content-length: 1196
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=2ygWAiBCDJ&ts=256&cb=1746834243622 | 34.251.101.162 | 200 OK | 43 B |
URL GET obseu.astarsbuilding.com/tracker/tc_imp.gif?e=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&cri=2ygWAiBCDJ&ts=256&cb=1746834243622 IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
File typeGIF image data, version 89a, 1 x 1 Hashdb04c7b378cb2db912c3ba8a5a774ee3 dee34bd86c3484d31002182aa2b7caa4699126b8 98b3d9d20e032f90aca49e9b116225d539ff6fbdb7e42c3c363f63896ac03d2a
GET /tracker/tc_imp.gif?e=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&cri=2ygWAiBCDJ&ts=256&cb=1746834243622 HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
date: Fri, 09 May 2025 23:44:03 GMT
expires: Fri, 01 Jan 1990 00:00:00 GMT
pragma: no-cache
content-length: 43
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9p447nnwx0vr&cd_fexp=72717107&aqid=Q5MeaLeFHMW5juwP1oKBiAU&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=6%7C0%7C610%7C131%7C116&lle=0&ifv=1&hpt=1 | 142.250.178.46 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9p447nnwx0vr&cd_fexp=72717107&aqid=Q5MeaLeFHMW5juwP1oKBiAU&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=6%7C0%7C610%7C131%7C116&lle=0&ifv=1&hpt=1 IP142.250.178.46:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=9p447nnwx0vr&cd_fexp=72717107&aqid=Q5MeaLeFHMW5juwP1oKBiAU&psid=5837883959&pbt=bv&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=6%7C0%7C610%7C131%7C116&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-0eAZcUh10dRhW2UO8Zm0Ag' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 09 May 2025 23:44:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| c1.applicationgrabb.com/favicon.ico | 74.206.228.78 | 404 Not Found | 153 B |
URL GET c1.applicationgrabb.com/favicon.ico IP74.206.228.78:80 ASN#27257 WEBAIR-INTERNET
Requested byhttp://c1.applicationgrabb.com/?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt
File typeHTML document, ASCII text, with CRLF line terminators Hash706a98254456810d3e849c3957af9d01 e461d072a6ba8f0082d6f187eba7f053343529c6 8351c0267c2cd7866ff04c04261f06cd75af9a7130aac848ca43fd047404e229
GET /favicon.ico HTTP/1.1
Host: c1.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://c1.applicationgrabb.com/?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.18.0
Date: Fri, 09 May 2025 23:44:00 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| ww9.applicationgrabb.com/munin/a/tr/browserjs?domain=applicationgrabb.com&toggle=browserjs&uid=MTc0NjgzNDI0MS45NTk1OjJkMzYxOTQwYjZhNzlmNDQyMjQ2OGUwODQxNzY5ZGY0NTlhMzI3NTMyOWRhNGI1NTlkNDE3ZDVkZTJjNjBiMWU6NjgxZTkzNDFlYTQyMQ%3D%3D | 13.248.148.254 | 200 OK | 0 B |
URL GET ww9.applicationgrabb.com/munin/a/tr/browserjs?domain=applicationgrabb.com&toggle=browserjs&uid=MTc0NjgzNDI0MS45NTk1OjJkMzYxOTQwYjZhNzlmNDQyMjQ2OGUwODQxNzY5ZGY0NTlhMzI3NTMyOWRhNGI1NTlkNDE3ZDVkZTJjNjBiMWU6NjgxZTkzNDFlYTQyMQ%3D%3D IP13.248.148.254:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerLet's Encrypt Subjectww9.applicationgrabb.com Fingerprint13:FE:50:1A:17:09:5A:5B:65:BD:18:06:65:C3:ED:16:EA:A4:BF:72 ValiditySun, 30 Mar 2025 05:16:27 GMT - Sat, 28 Jun 2025 05:16:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/browserjs?domain=applicationgrabb.com&toggle=browserjs&uid=MTc0NjgzNDI0MS45NTk1OjJkMzYxOTQwYjZhNzlmNDQyMjQ2OGUwODQxNzY5ZGY0NTlhMzI3NTMyOWRhNGI1NTlkNDE3ZDVkZTJjNjBiMWU6NjgxZTkzNDFlYTQyMQ%3D%3D HTTP/1.1
Host: ww9.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Fri, 09 May 2025 23:44:02 GMT
server: Caddy, nginx
x-custom-track: browserjs
content-length: 0
X-Firefox-Spdy: h2
|
|
| www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true | 142.250.178.68 | 200 OK | 143 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true IP142.250.178.68:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerGoogle Trust Services Subjectwww.google.com FingerprintC0:9B:21:A5:10:36:7E:DC:25:8D:0B:AB:4B:D9:D7:AD:92:06:96:49 ValidityMon, 21 Apr 2025 08:42:35 GMT - Mon, 14 Jul 2025 08:42:34 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size143 kB (143318 bytes) Hash3304efd24dfa8c4c7ce40f3de600b4e9 03123332d63cb05c2e839167db15d213579b351d 0c52f00df6667982d053daab715ab61912b336347026c51bfb3afd401213a787
GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 09 May 2025 23:44:02 GMT
expires: Fri, 09 May 2025 23:44:02 GMT
cache-control: private, max-age=3600
etag: "4995297505324853359"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.178.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.178.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww9.applicationgrabb.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.lQwUehuTMquWYvona3WhpoTnP02ma4V3T3Um71KkFNnIAHMOiwyVoQ.jXcBIseemc27wP-f_rMb6Q.rz1U0YOzGEjs7Bzw7k0a48T94yjluEXNBTiv40msHfeI6IXNSLaczJ3IKz3sK51wJ1dg1lMCv0pbRRBGprGQIcnf1sQp1AeFJtkR-DfejI8tZE3Bbdo7NAzdkUxJ5K7rooksREi1gGGRpwDHkaFXDNfm8b0Ne1LkFq_55sLBXAwRvJ_CvAiQKGmtbNRulX0rTl-8oY2HmPy-kXhceLUF5exyO9drPjkbav8KXLrfLHu4XkkEdwgP0u-oaVuNYccHzegtLTIofZtlJ6aZlybAor-Ww60b-jW972j7HluGpc9PvLhQbVR-zmsvlQt7QDe-wmuHtvrcuFs3PzNBNoZys9bX5gn_EgdWOwqlPtcW6b-3tbUvD5bnH7Z4CEfgbPeA9att2xDmADO3SP0_kfMWzZbbckQEt7pFOitTyF9Xq9RY-RiePK489IR72xKjuGpPxLgMjgy0zgQhtZVCx5-rWTFExrlZ7ewQXueTcOwljjDiQSLOZenKHU4fRZpzwYJHW0yimiTD5gjltOzxApAo4W_Le6Abv3QZ7HaUvJ9xLkCnO4EgisxZdUDDr_a919H3Oh9irBn_pGNooPV1gZTambKt9rzwhfM30i5yBWAmLr_JYjLDZ3ZaRYR1Cd_lPDtVw9eZg7yPbJC-o-WDD0bQ0w.k0ShaprKXeZOOz13sVbzkg&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=7301746834243123&num=0&output=afd_ads&domain_name=ww9.applicationgrabb.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1746834243125&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww9.applicationgrabb.com%2F&referer=http%3A%2F%2Fapplicationgrabb.com%2F CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint88:06:54:F9:FF:71:9C:F6:50:7F:58:EA:5C:98:77:FF:88:95:B5:94 ValidityMon, 21 Apr 2025 08:41:44 GMT - Mon, 14 Jul 2025 08:41:43 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 May 2025 15:16:31 GMT
expires: Sat, 10 May 2025 14:16:31 GMT
cache-control: public, max-age=82800
age: 30453
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| applicationgrabb.com/favicon.ico | 173.239.8.164 | 404 Not Found | 153 B |
URL GET applicationgrabb.com/favicon.ico IP173.239.8.164:80 ASN#27257 WEBAIR-INTERNET
Requested byhttp://applicationgrabb.com/
File typeHTML document, ASCII text, with CRLF line terminators Hash932da5a430ff6db1bc48425b567d56fa e7e88023dbbc6346d354ffe9fb7db957888c2299 10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /favicon.ico HTTP/1.1
Host: applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://applicationgrabb.com/
DNT: 1
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Fri, 09 May 2025 23:44:01 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js | 54.240.174.61 | 200 OK | 112 kB |
URL GET euob.astarsbuilding.com/sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js IP54.240.174.61:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerAmazon Subject*.astarsbuilding.com FingerprintDD:1E:42:74:B7:0D:4D:51:5C:C2:3A:AF:0C:79:1A:F5:AA:7C:06:D5 ValidityTue, 18 Jun 2024 00:00:00 GMT - Fri, 18 Jul 2025 23:59:59 GMT
Size112 kB (111620 bytes) Hash5d32edfdd5eb814ac05e5087ac512325 0c3fdce821e9fe7c8c86c144696b6dedd351b6ac 4ade4714bca4cc899e1480079c3c6d5e302d1f2760cc249f799cc941075754f1
GET /sxp/i/224f85302aa2b6ec30aac9a85da2cbf9.js HTTP/1.1
Host: euob.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
content-length: 40958
content-encoding: gzip
server: Caddy
cache-control: max-age=43200
date: Fri, 09 May 2025 12:14:24 GMT
expires: Sat, 10 May 2025 00:14:24 GMT
etag: "1b404-DD/c6CHp/nyMhsFEaWtt7dNRtqw"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: i3NtpBTK33jeyvSizyFiskvi0zulgyL3wMAps7qVuK2LD3Bs5tgwIw==
age: 41378
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww9.applicationgrabb.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.lQwUehuTMquWYvona3WhpoTnP02ma4V3T3Um71KkFNnIAHMOiwyVoQ.jXcBIseemc27wP-f_rMb6Q.rz1U0YOzGEjs7Bzw7k0a48T94yjluEXNBTiv40msHfeI6IXNSLaczJ3IKz3sK51wJ1dg1lMCv0pbRRBGprGQIcnf1sQp1AeFJtkR-DfejI8tZE3Bbdo7NAzdkUxJ5K7rooksREi1gGGRpwDHkaFXDNfm8b0Ne1LkFq_55sLBXAwRvJ_CvAiQKGmtbNRulX0rTl-8oY2HmPy-kXhceLUF5exyO9drPjkbav8KXLrfLHu4XkkEdwgP0u-oaVuNYccHzegtLTIofZtlJ6aZlybAor-Ww60b-jW972j7HluGpc9PvLhQbVR-zmsvlQt7QDe-wmuHtvrcuFs3PzNBNoZys9bX5gn_EgdWOwqlPtcW6b-3tbUvD5bnH7Z4CEfgbPeA9att2xDmADO3SP0_kfMWzZbbckQEt7pFOitTyF9Xq9RY-RiePK489IR72xKjuGpPxLgMjgy0zgQhtZVCx5-rWTFExrlZ7ewQXueTcOwljjDiQSLOZenKHU4fRZpzwYJHW0yimiTD5gjltOzxApAo4W_Le6Abv3QZ7HaUvJ9xLkCnO4EgisxZdUDDr_a919H3Oh9irBn_pGNooPV1gZTambKt9rzwhfM30i5yBWAmLr_JYjLDZ3ZaRYR1Cd_lPDtVw9eZg7yPbJC-o-WDD0bQ0w.k0ShaprKXeZOOz13sVbzkg&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=7301746834243123&num=0&output=afd_ads&domain_name=ww9.applicationgrabb.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1746834243125&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww9.applicationgrabb.com%2F&referer=http%3A%2F%2Fapplicationgrabb.com%2F | 142.250.178.46 | 200 OK | 16 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww9.applicationgrabb.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.lQwUehuTMquWYvona3WhpoTnP02ma4V3T3Um71KkFNnIAHMOiwyVoQ.jXcBIseemc27wP-f_rMb6Q.rz1U0YOzGEjs7Bzw7k0a48T94yjluEXNBTiv40msHfeI6IXNSLaczJ3IKz3sK51wJ1dg1lMCv0pbRRBGprGQIcnf1sQp1AeFJtkR-DfejI8tZE3Bbdo7NAzdkUxJ5K7rooksREi1gGGRpwDHkaFXDNfm8b0Ne1LkFq_55sLBXAwRvJ_CvAiQKGmtbNRulX0rTl-8oY2HmPy-kXhceLUF5exyO9drPjkbav8KXLrfLHu4XkkEdwgP0u-oaVuNYccHzegtLTIofZtlJ6aZlybAor-Ww60b-jW972j7HluGpc9PvLhQbVR-zmsvlQt7QDe-wmuHtvrcuFs3PzNBNoZys9bX5gn_EgdWOwqlPtcW6b-3tbUvD5bnH7Z4CEfgbPeA9att2xDmADO3SP0_kfMWzZbbckQEt7pFOitTyF9Xq9RY-RiePK489IR72xKjuGpPxLgMjgy0zgQhtZVCx5-rWTFExrlZ7ewQXueTcOwljjDiQSLOZenKHU4fRZpzwYJHW0yimiTD5gjltOzxApAo4W_Le6Abv3QZ7HaUvJ9xLkCnO4EgisxZdUDDr_a919H3Oh9irBn_pGNooPV1gZTambKt9rzwhfM30i5yBWAmLr_JYjLDZ3ZaRYR1Cd_lPDtVw9eZg7yPbJC-o-WDD0bQ0w.k0ShaprKXeZOOz13sVbzkg&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=7301746834243123&num=0&output=afd_ads&domain_name=ww9.applicationgrabb.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1746834243125&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww9.applicationgrabb.com%2F&referer=http%3A%2F%2Fapplicationgrabb.com%2F IP142.250.178.46:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (15476) Hasheb574597abccbf68df0fe84713566446 bd89e70f6fe58782441327c75b1319d0add67897 c38381a848d950dbece0b38fca6aec47111e8320ee0d40ca2a1f104df279cf26
GET /afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww9.applicationgrabb.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.lQwUehuTMquWYvona3WhpoTnP02ma4V3T3Um71KkFNnIAHMOiwyVoQ.jXcBIseemc27wP-f_rMb6Q.rz1U0YOzGEjs7Bzw7k0a48T94yjluEXNBTiv40msHfeI6IXNSLaczJ3IKz3sK51wJ1dg1lMCv0pbRRBGprGQIcnf1sQp1AeFJtkR-DfejI8tZE3Bbdo7NAzdkUxJ5K7rooksREi1gGGRpwDHkaFXDNfm8b0Ne1LkFq_55sLBXAwRvJ_CvAiQKGmtbNRulX0rTl-8oY2HmPy-kXhceLUF5exyO9drPjkbav8KXLrfLHu4XkkEdwgP0u-oaVuNYccHzegtLTIofZtlJ6aZlybAor-Ww60b-jW972j7HluGpc9PvLhQbVR-zmsvlQt7QDe-wmuHtvrcuFs3PzNBNoZys9bX5gn_EgdWOwqlPtcW6b-3tbUvD5bnH7Z4CEfgbPeA9att2xDmADO3SP0_kfMWzZbbckQEt7pFOitTyF9Xq9RY-RiePK489IR72xKjuGpPxLgMjgy0zgQhtZVCx5-rWTFExrlZ7ewQXueTcOwljjDiQSLOZenKHU4fRZpzwYJHW0yimiTD5gjltOzxApAo4W_Le6Abv3QZ7HaUvJ9xLkCnO4EgisxZdUDDr_a919H3Oh9irBn_pGNooPV1gZTambKt9rzwhfM30i5yBWAmLr_JYjLDZ3ZaRYR1Cd_lPDtVw9eZg7yPbJC-o-WDD0bQ0w.k0ShaprKXeZOOz13sVbzkg&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=7301746834243123&num=0&output=afd_ads&domain_name=ww9.applicationgrabb.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1746834243125&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww9.applicationgrabb.com%2F&referer=http%3A%2F%2Fapplicationgrabb.com%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Fri, 09 May 2025 23:44:03 GMT
expires: Fri, 09 May 2025 23:44:03 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-CBjPCkSHNRRFnpR4_kPB8A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3560
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1760
Origin: https://ww9.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww9.applicationgrabb.com
content-type: application/json
date: Fri, 09 May 2025 23:44:18 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png | 3.167.7.97 | 200 OK | 11 kB |
URL GET d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png IP3.167.7.97:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerAmazon Subject*.cloudfront.net Fingerprint28:D3:87:79:3C:E8:8B:3C:D9:10:45:E5:F7:64:7A:6D:44:4E:5A:62 ValidityTue, 30 Jul 2024 00:00:00 GMT - Thu, 03 Jul 2025 23:59:59 GMT
File typePNG image data, 1500 x 600, 8-bit colormap, non-interlaced Hash0cb2e5165dc9324eb462199f04e1ffa9 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1
Host: d38psrni17bvxu.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
content-length: 11375
server: nginx
date: Fri, 09 May 2025 11:05:13 GMT
accept-ranges: bytes
last-modified: Thu, 21 Mar 2024 11:48:11 GMT
etag: "czzekhpxmtxd8rz"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 bac2c08263be93278e77355a3ca67ff6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P2
x-amz-cf-id: w0loyd-t4lrcInJEleSinoVjoacsGbP1FBW6gw2UmhMp5j-UImt_Mw==
age: 45529
X-Firefox-Spdy: h2
|
|
| ww9.applicationgrabb.com/munin/a/tr/answercheck/yes?domain=applicationgrabb.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0NjgzNDI0MS45NTk1OjJkMzYxOTQwYjZhNzlmNDQyMjQ2OGUwODQxNzY5ZGY0NTlhMzI3NTMyOWRhNGI1NTlkNDE3ZDVkZTJjNjBiMWU6NjgxZTkzNDFlYTQyMQ%3D%3D | 13.248.148.254 | 200 OK | 0 B |
URL GET ww9.applicationgrabb.com/munin/a/tr/answercheck/yes?domain=applicationgrabb.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0NjgzNDI0MS45NTk1OjJkMzYxOTQwYjZhNzlmNDQyMjQ2OGUwODQxNzY5ZGY0NTlhMzI3NTMyOWRhNGI1NTlkNDE3ZDVkZTJjNjBiMWU6NjgxZTkzNDFlYTQyMQ%3D%3D IP13.248.148.254:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerLet's Encrypt Subjectww9.applicationgrabb.com Fingerprint13:FE:50:1A:17:09:5A:5B:65:BD:18:06:65:C3:ED:16:EA:A4:BF:72 ValiditySun, 30 Mar 2025 05:16:27 GMT - Sat, 28 Jun 2025 05:16:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/tr/answercheck/yes?domain=applicationgrabb.com&caf=1&toggle=answercheck&answer=yes&uid=MTc0NjgzNDI0MS45NTk1OjJkMzYxOTQwYjZhNzlmNDQyMjQ2OGUwODQxNzY5ZGY0NTlhMzI3NTMyOWRhNGI1NTlkNDE3ZDVkZTJjNjBiMWU6NjgxZTkzNDFlYTQyMQ%3D%3D HTTP/1.1
Host: ww9.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: _cq_duid=1.1746834243.9RRCjWOjYTdXoMJP; _cq_suid=1.1746834243.BPf0SvTVVlENgpkH
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-origin: *
alt-svc: h3=":50944"; ma=2592000
content-type: text/html; charset=UTF-8
date: Fri, 09 May 2025 23:44:03 GMT
server: Caddy, nginx
x-custom-track: answercheck
content-length: 0
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff | 142.250.178.33 | 200 OK | 391 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff IP142.250.178.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww9.applicationgrabb.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.lQwUehuTMquWYvona3WhpoTnP02ma4V3T3Um71KkFNnIAHMOiwyVoQ.jXcBIseemc27wP-f_rMb6Q.rz1U0YOzGEjs7Bzw7k0a48T94yjluEXNBTiv40msHfeI6IXNSLaczJ3IKz3sK51wJ1dg1lMCv0pbRRBGprGQIcnf1sQp1AeFJtkR-DfejI8tZE3Bbdo7NAzdkUxJ5K7rooksREi1gGGRpwDHkaFXDNfm8b0Ne1LkFq_55sLBXAwRvJ_CvAiQKGmtbNRulX0rTl-8oY2HmPy-kXhceLUF5exyO9drPjkbav8KXLrfLHu4XkkEdwgP0u-oaVuNYccHzegtLTIofZtlJ6aZlybAor-Ww60b-jW972j7HluGpc9PvLhQbVR-zmsvlQt7QDe-wmuHtvrcuFs3PzNBNoZys9bX5gn_EgdWOwqlPtcW6b-3tbUvD5bnH7Z4CEfgbPeA9att2xDmADO3SP0_kfMWzZbbckQEt7pFOitTyF9Xq9RY-RiePK489IR72xKjuGpPxLgMjgy0zgQhtZVCx5-rWTFExrlZ7ewQXueTcOwljjDiQSLOZenKHU4fRZpzwYJHW0yimiTD5gjltOzxApAo4W_Le6Abv3QZ7HaUvJ9xLkCnO4EgisxZdUDDr_a919H3Oh9irBn_pGNooPV1gZTambKt9rzwhfM30i5yBWAmLr_JYjLDZ3ZaRYR1Cd_lPDtVw9eZg7yPbJC-o-WDD0bQ0w.k0ShaprKXeZOOz13sVbzkg&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=7301746834243123&num=0&output=afd_ads&domain_name=ww9.applicationgrabb.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1746834243125&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww9.applicationgrabb.com%2F&referer=http%3A%2F%2Fapplicationgrabb.com%2F CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint88:06:54:F9:FF:71:9C:F6:50:7F:58:EA:5C:98:77:FF:88:95:B5:94 ValidityMon, 21 Apr 2025 08:41:44 GMT - Mon, 14 Jul 2025 08:41:43 GMT
File typeSVG Scalable Vector Graphics image Hash8959ddcd9712196961d93f58064ed655 62ab1e38e7e9fbf58a04381b76c2d96a9c829f24 17c7a89bf169c2ee400e31b042cea68513f06b9cd7d1e8990dbec800f0d771c7
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 270
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 May 2025 23:40:55 GMT
expires: Sat, 10 May 2025 22:40:55 GMT
cache-control: public, max-age=82800
age: 189
last-modified: Thu, 20 Jul 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 2543
Origin: https://ww9.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww9.applicationgrabb.com
content-type: application/json
date: Fri, 09 May 2025 23:44:04 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1760
Origin: https://ww9.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww9.applicationgrabb.com
content-type: application/json
date: Fri, 09 May 2025 23:44:13 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| c1.applicationgrabb.com/?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt | 74.206.228.78 | 200 OK | 368 B |
URL User Request GET c1.applicationgrabb.com/?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt IP74.206.228.78:80 ASN#27257 WEBAIR-INTERNET
File typeHTML document, ASCII text Hash3a9830a2f57ef1e602de02bd9cc8eb56 5135a0295755e536b833c6c6010900ff99cdbabf 8d138bedf3228f7ef9405940526a73f49395fd2917aa22e7d5596297e222da42
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET ADWARE_PUP W32/InstallRex.Adware Initial CnC Beacon |
GET /?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt HTTP/1.1
Host: c1.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Fri, 09 May 2025 23:44:00 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1757
Origin: https://ww9.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww9.applicationgrabb.com
content-type: application/json
date: Fri, 09 May 2025 23:44:08 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|
| c1.applicationgrabb.com/?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt |  0.0.0.0 | | 0 B |
URL User Request GET c1.applicationgrabb.com/?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET ADWARE_PUP W32/InstallRex.Adware Initial CnC Beacon |
GET /?step_id=1&installer_id=1396517180073320531&publisher_id=1540&source_id=0&page_id=0&affiliate_id=0&country_code=RU&locale=EN&browser_id=1&download_id=4595482213281328589&external_id=0&session_id=4790309341372954312&hardware_id=7722287387679728777&product_name=Home+Run+Brazilian+1CD&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&=&filesize=96915&product_image_url=cdn.static.opensubtitles.org/gfx/&reffer=http://www.opensubtitles.org/en&product_download_url=%3CServerUrl%3E/addons/error.txt&product_file_name=error.txt HTTP/1.1
Host: c1.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| ww9.applicationgrabb.com/munin/a/ls?t=681e9341&token=fef87d9ceef8bb0d3d6e2df73ea6ed4907ba0e94 | 13.248.148.254 | 201 Created | 0 B |
URL GET ww9.applicationgrabb.com/munin/a/ls?t=681e9341&token=fef87d9ceef8bb0d3d6e2df73ea6ed4907ba0e94 IP13.248.148.254:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerLet's Encrypt Subjectww9.applicationgrabb.com Fingerprint13:FE:50:1A:17:09:5A:5B:65:BD:18:06:65:C3:ED:16:EA:A4:BF:72 ValiditySun, 30 Mar 2025 05:16:27 GMT - Sat, 28 Jun 2025 05:16:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /munin/a/ls?t=681e9341&token=fef87d9ceef8bb0d3d6e2df73ea6ed4907ba0e94 HTTP/1.1
Host: ww9.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 201 Created
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
access-control-allow-methods: POST, OPTIONS
access-control-allow-origin:
access-control-max-age: 86400
alt-svc: h3=":50944"; ma=2592000
charset: utf-8
content-type: text/javascript;charset=UTF-8
date: Fri, 09 May 2025 23:44:02 GMT
server: Caddy, nginx
status: 201 Created
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_lb5Ola9lcIAnjPEATZ4jtzD76XUCPMTsE7J0z3w9laYm0I/JNgZjXWXgTtPUKIcfOnKXcU8LfRsfi4WkdrjJfA==
x-log-success: 681e93421af3bdcb5d031da9
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 142.250.178.46 | 200 OK | 143 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP142.250.178.46:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=5837883959&pcsa=false&channel=000001%2Cbucket003%2Cbucket077&client=dp-teaminternet04_3ph&r=m&hl=no&ivt=0&rpbu=https%3A%2F%2Fww9.applicationgrabb.com%2F%3Fts%3DeyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4Q0JDLUhTMjU2In0.lQwUehuTMquWYvona3WhpoTnP02ma4V3T3Um71KkFNnIAHMOiwyVoQ.jXcBIseemc27wP-f_rMb6Q.rz1U0YOzGEjs7Bzw7k0a48T94yjluEXNBTiv40msHfeI6IXNSLaczJ3IKz3sK51wJ1dg1lMCv0pbRRBGprGQIcnf1sQp1AeFJtkR-DfejI8tZE3Bbdo7NAzdkUxJ5K7rooksREi1gGGRpwDHkaFXDNfm8b0Ne1LkFq_55sLBXAwRvJ_CvAiQKGmtbNRulX0rTl-8oY2HmPy-kXhceLUF5exyO9drPjkbav8KXLrfLHu4XkkEdwgP0u-oaVuNYccHzegtLTIofZtlJ6aZlybAor-Ww60b-jW972j7HluGpc9PvLhQbVR-zmsvlQt7QDe-wmuHtvrcuFs3PzNBNoZys9bX5gn_EgdWOwqlPtcW6b-3tbUvD5bnH7Z4CEfgbPeA9att2xDmADO3SP0_kfMWzZbbckQEt7pFOitTyF9Xq9RY-RiePK489IR72xKjuGpPxLgMjgy0zgQhtZVCx5-rWTFExrlZ7ewQXueTcOwljjDiQSLOZenKHU4fRZpzwYJHW0yimiTD5gjltOzxApAo4W_Le6Abv3QZ7HaUvJ9xLkCnO4EgisxZdUDDr_a919H3Oh9irBn_pGNooPV1gZTambKt9rzwhfM30i5yBWAmLr_JYjLDZ3ZaRYR1Cd_lPDtVw9eZg7yPbJC-o-WDD0bQ0w.k0ShaprKXeZOOz13sVbzkg&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2541811284092968&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301548%2C17301266%2C72717107&format=r3%7Cs&nocache=7301746834243123&num=0&output=afd_ads&domain_name=ww9.applicationgrabb.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1746834243125&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=760&frm=0&uio=--&cont=tc&drt=0&jsid=caf&jsv=754937097&rurl=https%3A%2F%2Fww9.applicationgrabb.com%2F&referer=http%3A%2F%2Fapplicationgrabb.com%2F CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
File typeJavaScript source, ASCII text, with very long lines (1839) Size143 kB (143334 bytes) Hash1127c2dce08b59b0c7f17bbedf3cc56c 4348c594a55590e9fbcbe62fd2a38a266b011050 2cb8616e3fced62c7666c05b2f7493a60be9c32ed27c8d6331047823810fa335
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Fri, 09 May 2025 23:44:03 GMT
expires: Fri, 09 May 2025 23:44:03 GMT
cache-control: private, max-age=3600
etag: "1619249412800986116"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| | 173.239.8.164 | 200 OK | 187 B |
IP173.239.8.164:80 ASN#27257 WEBAIR-INTERNET
File typeHTML document, ASCII text Hash9bbf113d70ce827ebed6570413e60859 49e9bc7e683a31fc4b6ca3d42abe773c5dbb2039 834591f508f23ba438b07c132bb2883a855a13f5ca4751a46e48c22cbf420fa2
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET ADWARE_PUP Win32/Zonebac Traffic Redirect |
POST / HTTP/1.1
Host: applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://c1.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: http://c1.applicationgrabb.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Fri, 09 May 2025 23:44:01 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
|
|
| ww9.applicationgrabb.com/ | 13.248.148.254 | 200 OK | 19 kB |
URL User Request GET ww9.applicationgrabb.com/ IP13.248.148.254:443
CertificateIssuerLet's Encrypt Subjectww9.applicationgrabb.com Fingerprint13:FE:50:1A:17:09:5A:5B:65:BD:18:06:65:C3:ED:16:EA:A4:BF:72 ValiditySun, 30 Mar 2025 05:16:27 GMT - Sat, 28 Jun 2025 05:16:26 GMT
File typeHTML document, ASCII text, with very long lines (9214) Hashce1ae6cafaecbd8b0b04282bf0ae0242 8753af5349cf90392a5060291ba64d610665c0ac 52e8491e48fd6752674a7a2b2012dc1abb658ab3071a69d9f6e75e354af35021
GET / HTTP/1.1
Host: ww9.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://applicationgrabb.com/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile
accept-ch-lifetime: 30
alt-svc: h3=":50944"; ma=2592000
content-encoding: gzip
content-type: text/html; charset=UTF-8
date: Fri, 09 May 2025 23:44:01 GMT
server: Caddy, nginx
vary: Accept-Encoding
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_AmLktKSHVfMJj/+21RV4mKB80EzV4iPkhsWUFqBWPRKFGKfYevCyT3VoF5WYVFFN9kTV+glU3AXeic7xOxyvsg==
x-buckets: bucket003,bucket077
x-domain: applicationgrabb.com
x-language: norwegian
x-pcrew-blocked-reason: hosting network
x-pcrew-ip-organization: Blix Solutions
x-subdomain: ww9
x-template: tpl_CleanPeppermintBlack_twoclick
X-Firefox-Spdy: h2
|
|
| ww9.applicationgrabb.com/favicon.ico | 13.248.148.254 | 200 OK | 0 B |
URL GET ww9.applicationgrabb.com/favicon.ico IP13.248.148.254:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerLet's Encrypt Subjectww9.applicationgrabb.com Fingerprint13:FE:50:1A:17:09:5A:5B:65:BD:18:06:65:C3:ED:16:EA:A4:BF:72 ValiditySun, 30 Mar 2025 05:16:27 GMT - Sat, 28 Jun 2025 05:16:26 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: ww9.applicationgrabb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
alt-svc: h3=":50944"; ma=2592000
content-type: image/x-icon
date: Fri, 09 May 2025 23:44:02 GMT
etag: "670f7248-0"
last-modified: Wed, 16 Oct 2024 07:59:04 GMT
server: Caddy, nginx
content-length: 0
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=16u8zvnd10pp&cd_fexp=72717107&aqid=Q5MeaLeFHMW5juwP1oKBiAU&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=6%7C0%7C610%7C131%7C116&lle=0&ifv=1&hpt=1 | 142.250.178.46 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=16u8zvnd10pp&cd_fexp=72717107&aqid=Q5MeaLeFHMW5juwP1oKBiAU&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=6%7C0%7C610%7C131%7C116&lle=0&ifv=1&hpt=1 IP142.250.178.46:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog FingerprintDC:F5:98:68:53:E0:CF:EF:0C:D9:7C:BF:2E:FE:35:0F:48:72:BE:F4 ValidityMon, 21 Apr 2025 08:43:52 GMT - Mon, 14 Jul 2025 08:43:51 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-teaminternet04_3ph&output=uds_ads_only&zx=16u8zvnd10pp&cd_fexp=72717107&aqid=Q5MeaLeFHMW5juwP1oKBiAU&psid=5837883959&pbt=bs&adbx=375&adby=132&adbh=498&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet04_3ph&errv=754937097&csala=6%7C0%7C610%7C131%7C116&lle=0&ifv=1&hpt=1 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-IO2iZxf5hWgmwlJhx25--Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 09 May 2025 23:44:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| obseu.astarsbuilding.com/mon | 34.251.101.162 | 200 OK | 0 B |
URL POST obseu.astarsbuilding.com/mon IP34.251.101.162:443
Requested byhttps://ww9.applicationgrabb.com/ CertificateIssuerZeroSSL Subject*.astarsbuilding.com FingerprintCD:97:8B:26:8F:44:36:BF:15:6E:E5:CB:05:4C:8D:F5:F1:0C:F2:54 ValidityThu, 27 Mar 2025 00:00:00 GMT - Wed, 25 Jun 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /mon HTTP/1.1
Host: obseu.astarsbuilding.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 1757
Origin: https://ww9.applicationgrabb.com
DNT: 1
Connection: keep-alive
Referer: https://ww9.applicationgrabb.com/
Cookie: cg_uuid=2c56435a8714324f8874f8463c226f2d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE
access-control-allow-origin: https://ww9.applicationgrabb.com
content-type: application/json
date: Fri, 09 May 2025 23:44:06 GMT
content-length: 0
X-Firefox-Spdy: h2
|
|