iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
104.21.30.84200 OK 10 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
IP 104.21.30.84:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3561)
Hash 6c57ba73bbce4b317a2f343b70f3cf40
f1833ac0a1e49cefa8ebfed40353da334106f344
5e9e7695fda376ed99e203a0f52f4176627413fba3e6ee460ef87e00bd31ae17
GET /cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:11 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:11 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gdPrF7RSU5UHtNURyAbTCZhw2zXv6f24Ef%2Fnf6OzDiuYuR8Jj4mM6ltW4wbNipcdlMVqpM9wo3eIM6gRiwkSbGiC8YNdxZUADcjxzBPImxPKlh%2BChLmAIflJxoZAsN1CSfh2dKUW5O1AyA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bb3893b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0c35c3ec659d3a26ea97e68d787bb043
d97e3672244efec5b7814f2d8a734cd1a9387854
4c946a026114ff05316d92277750facf3d5f5d162839149da0b7fb1a4cff6b5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4C946A026114FF05316D92277750FACF3D5F5D162839149DA0B7FB1A4CFF6B5E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10561
Expires: Tue, 31 Jan 2023 04:55:13 GMT
Date: Tue, 31 Jan 2023 01:59:12 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d2e72d45afe3d391c204b5391599607c
149d68b9d00a720b6f380fa2324779dca9dbe26d
f6f1c295c68dfebadacb1fc812b44e01c7ede0e203615ef3e2cced2ce2251e7e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6F1C295C68DFEBADACB1FC812B44E01C7EDE0E203615EF3E2CCED2CE2251E7E"
Last-Modified: Mon, 30 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8435
Expires: Tue, 31 Jan 2023 04:19:47 GMT
Date: Tue, 31 Jan 2023 01:59:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Retry-After, Content-Type, Content-Length, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 31 Jan 2023 01:43:15 GMT
content-type: application/json
age: 957
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 302c7548412192add063ad6c8b99cf3b
e5d178931a27db036ce8daae302594d3ff7050b8
fc2bd9091006189e67e8074093805ee5492ce16e1dbfba32e083abeeae34969d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FC2BD9091006189E67E8074093805EE5492CE16E1DBFBA32E083ABEEAE34969D"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5888
Expires: Tue, 31 Jan 2023 03:37:20 GMT
Date: Tue, 31 Jan 2023 01:59:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: mWsknPJf+NqCTeuImbB+4+aPuWFFqPz9u61bcx7RmP8xXU5xB3KM1SQfOTnDe3fFDziNC+R9yYMenufFOk/6qw==
x-amz-request-id: NWCC9NHBRPA55VMK
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 31 Jan 2023 01:50:59 GMT
age: 493
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 31 Jan 2023 01:59:12 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
iphone.quiztionnaire.uk/cp/_assets/css/style.css
104.21.30.84200 OK 3.7 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/style.css
IP 104.21.30.84:0
Hash 5ee8ddffb629cf54105ad55d6231ed77
8d3534595035cfec7e86f84497ac0862fd8ba274
37fa1753420e9599b324eadab4932c26ee221c16b7b1ed4ce8818cd3544c33f7
GET /cp/_assets/css/style.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-3f02"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=snB3bjOU6Cu4RmVs3n2rETQeDPSbwr2Cl4M2HQyh%2BBV4QU5yMS3%2FSPHYd8R58m%2FTy%2Ffv%2FMcyHTk2hhvVjuc%2FP%2Fm3hzTfzEgFflM9Tf%2BQbJhqa8jgV%2FT%2BV3a3U5KpB77Abxnbg9tAttbRMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bde9fab524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
151.101.193.229200 OK 24 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css
IP 151.101.193.229:0
File type Unicode text, UTF-8 text, with very long lines (65306)
Hash 57a992194d8a5b4bbd4ade561fd348bb
bb66f00fe168c6df50af51abdededdfceb15c59f
be95ec6ab71f5fa87401a698cb9566490258fa9012bb0e8467920b0f74163a0a
GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: text/css; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 31 Jan 2023 01:59:12 GMT
age: 23932508
x-served-by: cache-fra19136-FRA, cache-bma1655-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23938
X-Firefox-Spdy: h2
cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
151.101.193.229200 OK 23 kB URL HTTP/2 cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js
IP 151.101.193.229:0
File type ASCII text, with very long lines (65299)
Hash 1753c16688d0d51f0b3dc7ed7d4dbc4d
6a4842b3dc99394c6584c203175570ff8737c777
a61044d56003744699349a1ffbd6f85e0c62d4ac59b50d185363dd85d755b5c9
GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=31536000, s-maxage=31536000, immutable
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: 5.1.3
x-jsd-version-type: version
etag: W/"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM"
content-encoding: gzip
accept-ranges: bytes
date: Tue, 31 Jan 2023 01:59:12 GMT
age: 13499885
x-served-by: cache-fra19170-FRA, cache-bma1655-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 23046
X-Firefox-Spdy: h2
iphone.quiztionnaire.uk/cp/_assets/css/main.css
104.21.30.84200 OK 1.5 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/main.css
IP 104.21.30.84:0
Hash f0c4ead20215eaff39dd2c8879b29937
cfbeb5bc9b6270ddfaefcc00010e246862772552
c8265b8cdf3fef96bae1694edea3018d1ea979d304e570d3afc0363d7ea79e94
GET /cp/_assets/css/main.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-170f"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VTBCXZqZfvfbpE13wZ2pAjd0DZqSOxCHhMLtcTwasz14gEtqql7SEV4kxd8wF895TL7VYLe2BgmGvCg0JmHarXYWt2W5NIMXXhO8lpnFDVVwUpLopcPautNBqBAbz14SlE64A7mRuwY8Tg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bde9d0b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/css/form.css
104.21.30.84200 OK 2.1 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/form.css
IP 104.21.30.84:0
Hash 8ab3c7c939da2494b1cd7ceaa1b641b9
432c906ae9923c84052e54c02e108e24d35bce95
99fdd8673f11c60ca476d712c13a381827215a9d68a53d60bcbce0c2084ec362
GET /cp/_assets/css/form.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-33a6"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LvgQM89nOQaCwMiAha9I0%2FkfdBwvEtqg19BBU23HNRs5uBOLCUL1bHGoYXkpmAV%2BasAJpPlGPTTslfPpPmav2PDVmvjRNK8QnqOkRmsgxHZusKeMAtWKWqUPX7uYtWGv67Bb1CyN4gPnvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bde9b9b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/css/site-console.css
104.21.30.84200 OK 480 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/site-console.css
IP 104.21.30.84:0
Hash a3bcd153e49cc4106ef44e60927a0708
e2e377ff4cad0581db616ef8e50f146476788c88
7f9b44bf056814cb09662f8946024949f84573459b9e349c0aa1a3522daf0b36
GET /cp/_assets/css/site-console.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-55d"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yxPU0B7mKvQvAUd7jBOntIgIUjtl6Tp2DqXFEuiJkbykT8T11U7nn4VhnQA7mun5mXGyNnlW1D34IFEjv%2BoyPu%2BgauM%2FdIDbxEVwf4D57rAUO%2FAInNv0xb%2F%2B4qdkasRDQJXuc4msVCwWSg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bdebb6b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/css/fonts.css
104.21.30.84200 OK 1.2 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/fonts.css
IP 104.21.30.84:0
File type ASCII text, with very long lines (636)
Hash f51bd604bc0d85e457c8929596a2fa33
39123ceba51a1bd0dd64fffc2576b0551a8f9ec7
354726c61b66071bc0e6a8467cb9d47e42d22cb74c9db4e8d59b02787f9153b1
GET /cp/_assets/css/fonts.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-27db"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I6vS%2BOs0iCVfws70HRZrTymmsj1MieEYz0odP4X7%2Flvs7R96dJ%2BIxiQG%2BankPb8JxHmRx2hf1anuBATzNZKszCMaEJPvY4nI3fiuvsIwaD2FqNNMx2w68%2FMD6J1zMR08NbJwFRzoAB0DUA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bdeb140b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/css/animate.css
104.21.30.84200 OK 940 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/animate.css
IP 104.21.30.84:0
Hash f71915998bb2c86bbf4305b957809468
2bd582de860359bff1a860bc6e72cb14a24c92fe
d34ab14901f5110c8f2c72e929bbf78c5a68ba269a513f7cda6a38d6f807ae3d
GET /cp/_assets/css/animate.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-1ab5"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BYZFFhZqt62IOOU0ywwfANztWZue6dWyyhc7Vy%2B3PRvhpfj8ndFmX9uEfjmo0JAxl9HmNCdbNGJ9Z8NX3dPPx4EgbcBVn%2BJa%2BSn8FXPuYIljB4tI1%2Ff0Z2LSxhfE%2FdJ8oICemEtnzz0lKg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bdeae9b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a799f16f5814e9202997f27a519a0cb7
9dfad3ebb76e2568bc18d46f4c1db821f1bb2078
c4816ebee8f96749a264ab12d309a93741bda208a0461e213ceea13d61864038
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2448
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:12 GMT
Last-Modified: Tue, 31 Jan 2023 01:18:24 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
iphone.quiztionnaire.uk/cp/_assets/css/modal.css
104.21.30.84200 OK 873 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/css/modal.css
IP 104.21.30.84:0
Hash 1dd5f6eefa4a392bdf936cafec93e667
fd325fd5c5bfa0002b8b26577b1fcff5ed409d47
776320b1cacb643fc9f4e590a0be04e3277ca3dff4095798251196081e3a567f
GET /cp/_assets/css/modal.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-9b7"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OnES%2FnJ%2BnfVxmF6%2BwlZWGkkR37Oh9MJLwcszpklZUHYIm%2BAv3gNpaPD6WHYpcOvR21bjNlIqEqBhjAYzstSByNWoKmHpI89x9kOod1L0MqHhhF1bNoCYR%2FIZu%2BCIjWPEfhq%2BzqhgnZ0%2F7w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8be4a20b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
104.18.21.226200 OK 1.5 kB URL HTTP/1.1 ocsp.globalsign.com/ca/gsatlasr3dvtlsca2022q4
IP 104.18.21.226:0
Hash 77b4f984834d0d31a19dfce272ca6878
8bc4a1c7bf0096ae4d4a3517c58f18d3a0f5df80
5d60aa186d8b827401ccf1f9c8812e9c76acbad1b9fd578e07d6cdf422a1e09c
POST /ca/gsatlasr3dvtlsca2022q4 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/ocsp-response
Transfer-Encoding: chunked
Connection: keep-alive
Etag: "8EDE01748EFAD7069E24AFF89D401562E34A41B2"
Expires: Tue, 31 Jan 2023 13:00:00 GMT
Last-Modified: Tue, 31 Jan 2023 01:00:00 UTC
Cache-Control: s-maxage=3600, public, no-transform, must-revalidate
CF-Cache-Status: HIT
Age: 489
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8bebe3fb4f1-OSL
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/css/campaign.css
104.21.30.84200 OK 537 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/css/campaign.css
IP 104.21.30.84:0
Hash 674daf96f8e46782d2aef43413891058
6c869e32357a4a35f5117ad006855ada159e8551
e774f43c76f705e7f3bbbf94a30cbd741dbe957abed4f28d0b696680f754c313
GET /cp/iphn14_blk_frdy/gb/css/campaign.css HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: W/"63d7d0b4-67f"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gBpS8C1%2F%2FD8HdBvtxIkY0XM%2FvhRhbKzY971CDwxP0jPyV%2FOLjURpFNR3TZCdCur3q92DgVpoLtfkf3RnOTg6McGg9wvrhqHIfiuYCy9oBvWl%2BlO%2F0JXAWoCtMcDzPTVIBFdzzb0wmyaVpw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8be6a1bb50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/js/new_overlay_teaser.js
104.21.30.84200 OK 1.4 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/js/new_overlay_teaser.js
IP 104.21.30.84:0
Hash e30b4e64810d031eb2bc3a1f975dff58
1f75d3d10c0a7ce4142b87e75293f654f4ad5cb0
5c6a2b6b88fc83b07078c83471ac8df9aeb3e5f7c856ddeb248eead5fbf3f22b
Analyzer Verdict Alert fortinet Phishing
GET /cp/iphn14_blk_frdy/gb/js/new_overlay_teaser.js HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: W/"63d7d0b4-1dc9"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lulwKO%2BOvG0H%2F2ltZv3x3k%2F%2FtOqUcTKgnmwlxo%2BCRW8V26lheQ5hIPveiOCfrrmcLvj9PJSFsqbydhuk%2BhqT5hfU6RClz4pVqtAAmWmBUjjmJbX2cBlTKlDXbP7IbAZ4K%2FPokHax%2BeZxmA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8be9be9b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/js/responsive.js
104.21.30.84200 OK 449 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/js/responsive.js
IP 104.21.30.84:0
Hash e44958b1ad771e01f1635a12b01ee0ea
b3214bc104f54fd0edb951a7ad148e099bde5c65
bee7886eadef91dc734fa6badafbfd1e3802485ceeb5200a493681ee280ba66c
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/js/responsive.js HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-610"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=As6yVpNcogMNyuZSHRdNnlRvWeC5QNIhZMaR8r5ZSwXYwNRHQ3%2BsU09Lz5WYlqV49BZcL35vUQLMxsHayQKi9Gzljb7qLTm4KhCQiw0ktDN2JyIHgatEjdZVq4PM5%2FXJlSqqZNyTIp7hfg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8be9b350b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/forms/sweeps/gb/form_cached.js
104.21.30.84200 OK 616 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/forms/sweeps/gb/form_cached.js
IP 104.21.30.84:0
Hash 972e2313b70df98ee28887f7b5622f94
e5a2ca3e63575868701ca2efb756cb63377086a6
2c2f1aa3f7f70ae9193f264752043190091482d7bf8bab2572193a235a47833c
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/forms/sweeps/gb/form_cached.js HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-5b0"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ph7MCf8Ct5OeT72UHP5oPWl4RjEt4QKouyd3bSA3WNycBcyUTbfiDr98h8c%2BtMp5MsU4IFB2wLX0HkoHd6llHApKOKu%2B%2B7YMJu6Frk1URJY3JODIFq4IKZRWNwTA1LIOB9CsD1dem8OMDw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8be9a16b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/js/recent_winners.js
104.21.30.84200 OK 838 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/js/recent_winners.js
IP 104.21.30.84:0
Hash 1f3fd5e93c0c312ae0fa7c979726a98e
ed87a30d920cc281babc85a92aff188d22dcd2d2
f927a85de11f64f975e05c407326c9a5f6bb46c70a6e20663fe43823c552a873
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/js/recent_winners.js HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-832"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DhiSU%2FaXO5AJVPa%2BGaLp1okjVxsfvZI3YBq2Ro4wHT488pwfm1nEAN5LYhoe%2BLAhio%2F59O77ywK69EBo49eWMy%2BDeVNr78EzkQ7Pl7QOHE63TUVLEqdOYUBlpHEmGPYPJzom%2BXlx85J1zg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8beea40b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
23.36.76.226200 OK 344 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 956410c11b52291e39b5900ac5d4bfaf
4d4c5fe3c573781a16bc2a5f8f662148365225b8
2566dda5458d1cbf5c59fde6ff9cb76f342ae58a7af2a751d7e8c83220ba64a8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "2566DDA5458D1CBF5C59FDE6FF9CB76F342AE58A7AF2A751D7E8C83220BA64A8"
Last-Modified: Sat, 28 Jan 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14099
Expires: Tue, 31 Jan 2023 05:54:11 GMT
Date: Tue, 31 Jan 2023 01:59:12 GMT
Connection: keep-alive
iphone.quiztionnaire.uk/cp/_assets/js/bootstrap.min.js
104.21.30.84200 OK 15 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/js/bootstrap.min.js
IP 104.21.30.84:0
File type ASCII text, with very long lines (1289)
Hash 95ad0b5f06ccb640d7288036a9c2abdf
52c71e05b4f6ceabcedecdcc10770a6ba6502331
6de5d08db1b547c40759886378f3204bc435c91968a126ad934c399dbc7d58dd
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/js/bootstrap.min.js HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-f2fc"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4R0hserIVGKpkbdPrpXEa2dzBy%2FGKt8JdH%2FuQ1iOZmIR1%2FZdzlb1%2FDp977u84rQe0V3Z0IKOvuPwk2ahGjfLCrgSVr66r2K3TxhqbyD3qlORkCu2P0oTCLIAmO0GJF7ZPv6Zy0bgV7egVw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8beba45b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/js/jquery.min.js
104.21.30.84200 OK 33 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/js/jquery.min.js
IP 104.21.30.84:0
File type ASCII text, with very long lines (1963)
Hash 594a3feb69c7c103f48fd12541230f70
1cda49275ff0218a95a2d53d3b011d574c26d3ba
78ef04fc551e465f68249cb119cc112eaf08a6917dc080547c96f12a615669d4
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/js/jquery.min.js HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: application/javascript; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: W/"63d7d090-1b9fc"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D6OelV8oXWY106vFqupaU6eI6P0AYlXCQFyWwWwOYdO8tWnq6McH%2BPNCdV81YLuVtJwhKGUsSZNJ8cFOs8wBK608aSDhKtK%2BTzIP52Hk%2Br0KpR0bjH3kciMIIES%2FTm7%2BWz2%2BTpdKdGzGIg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8be9b29b500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
e1.o.lencr.org/
23.36.76.226200 OK 344 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 956410c11b52291e39b5900ac5d4bfaf
4d4c5fe3c573781a16bc2a5f8f662148365225b8
2566dda5458d1cbf5c59fde6ff9cb76f342ae58a7af2a751d7e8c83220ba64a8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "2566DDA5458D1CBF5C59FDE6FF9CB76F342AE58A7AF2A751D7E8C83220BA64A8"
Last-Modified: Sat, 28 Jan 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14099
Expires: Tue, 31 Jan 2023 05:54:11 GMT
Date: Tue, 31 Jan 2023 01:59:12 GMT
Connection: keep-alive
iphone.quiztionnaire.uk/cp/_assets/images/logo/logo.png
104.21.30.84200 OK 1.3 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/images/logo/logo.png
IP 104.21.30.84:0
File type PNG image data, 132 x 24, 8-bit colormap, non-interlaced\012- data
Hash 168bade4aaa63e53a51081bd3bd9fe8e
6911585bae75d0ce48cff89adbce6736f59e9762
0a3a38755e7f938e44320b9f68ec600e044fdb892a3f8d46a80697e53014aff4
GET /cp/_assets/images/logo/logo.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: image/png
Content-Length: 1320
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: "63d7d090-528"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PspgsW19C3Lr%2FpMYUUJv5tDBRoBs0fFLW5oe5M4l%2BDDhRo28r98rMGYBRv4P%2Bf7s%2F3hMcb1OfLNwj3lYSDZBwYHRzAHMc9YoRrsMcvPGN5yZ1DqQE40Zeaecu%2BGVSvbYCAuV16dwPILsnQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c02b14b524-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prize.gif
104.21.30.84500 Internal Server Error 193 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prize.gif
IP 104.21.30.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 53d720b83009f04611ff4c6d6328a507
f9e9192cd0ac7313e7055fc710f8d6370b9dda0c
842f84b2ccad51314214f52f2132fed2b367c649ecadd671e5ed997bb8ca91eb
GET /cp/iphn14_blk_frdy/gb/images/prize.gif HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 500 Internal Server Error
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zuAaCUlY4Y5OpFSUaianWZy%2Bu%2BpiODta9CaNlYQ1mJVCWyxMx6Y7G9MHxflFcTwasM2dYrRJGagLA%2FjHaI4PDdThCX8F5J0r2gmbm5VUgKDghYHDW5g71s6btXopbQGsTwJMtNfhCUeJAA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c02ab2b50b-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/bottom_image.gif
104.21.30.84500 Internal Server Error 193 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/bottom_image.gif
IP 104.21.30.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 53d720b83009f04611ff4c6d6328a507
f9e9192cd0ac7313e7055fc710f8d6370b9dda0c
842f84b2ccad51314214f52f2132fed2b367c649ecadd671e5ed997bb8ca91eb
GET /cp/iphn14_blk_frdy/gb/images/bottom_image.gif HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 500 Internal Server Error
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0WJQPZkVSi4T3lBR65pn0f1L3i8JiKy11YunXiNlQYQigQJEIuwb9HTl9Pq6GagAla6abn%2Fo%2BlaaQkpb4TucksTHpPx066rS9U627InujT5vnjHWvVKYVg0d2HOSCJ0SI6lUAu3NUau%2FNw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c02aebb509-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/images/row_logos/en/footer3.png
104.21.30.84200 OK 3.7 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/images/row_logos/en/footer3.png
IP 104.21.30.84:0
File type PNG image data, 220 x 72, 8-bit colormap, non-interlaced\012- data
Hash ca9d54dc3fc866e4d1b3f6426bb1f242
7284ab2178704740c2c3e782a0612cdc54201191
c8b335270a3583d898e18817e8e9b42d8775e214a3994745c48291a50ee040a3
GET /cp/_assets/images/row_logos/en/footer3.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: image/png
Content-Length: 3734
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: "63d7d090-e96"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uQKx0fDEZyguvbtokX5rsYzvWPM0eEwpDaKThydzaUPbhxi5n3Rd%2BzyePFjnmy8li8VYQADCMGK3EHoNJ8R%2FbLLkSpaEaewuXndGgwpWb%2BQGI7eC3xYILfn7bk7joDT%2F4Arx7qN2lVIqxg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c02be0b500-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/header-wap.png
104.21.30.84200 OK 9.1 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/header-wap.png
IP 104.21.30.84:0
File type PNG image data, 760 x 217, 8-bit colormap, non-interlaced\012- data
Hash 032a993e1846a0e13723eae99221ff2a
a162dfeb6505025a531efc3d219ac2ed7a176743
781a701e79100cce9b1ac0f2b198e3dfe515d29eb05f0d4e99c094a87e7ee16d
GET /cp/iphn14_blk_frdy/gb/images/header-wap.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: image/png
Content-Length: 9120
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: "63d7d0b4-23a0"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pCHWp1ATrzEUW9espXapWKQ%2BQgiUSTRGKgmveq21OrZpFncAhWx1wAU%2FAdVCue4SxiBTpXkR2YWtsuPXZhsqu8bhYtqYXTGX0PHqAmSU2x7oAWotx9oXOMHgslpEqcKbNZthBVwfWD8CNw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c02c9db50c-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/header.png
104.21.30.84200 OK 9.4 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/header.png
IP 104.21.30.84:0
File type PNG image data, 1068 x 240, 8-bit colormap, non-interlaced\012- data
Hash 0927560c796457fd457f77dfa4179906
29ec5092e4f50caa8dcebed18dc4d19a48d62c92
91679b66511132f77fdc59440c0403c956a65cdf154c9bbc14cbe0bcca7aba91
GET /cp/iphn14_blk_frdy/gb/images/header.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: image/png
Content-Length: 9356
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: "63d7d0b4-248c"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sMuSTdxnheevwynG6SPoErrwTTfeeFculweKEgAD1PE5xLJ2n%2FN7LkJDKJIN7LzlK6XFzSZxHLwxAnRvpJWBCsETsP5QiQkhoaQCyE9vv3CEaz2Jdqu08FSqUWS7NTCfVaJxsv1mL8c%2Bqg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c02ba00b59-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prize.png
104.21.30.84200 OK 48 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prize.png
IP 104.21.30.84:0
File type PNG image data, 536 x 459, 8-bit colormap, non-interlaced\012- data
Hash 73663829b6c0e366454a63ca5adae114
e0a48d3751cde4d1ec005083e8fcaaba2b420c73
38ab19fac8ddd56ab8e88d00a4ea5f48ec6107a74f9c2894e93628eca1c80f09
GET /cp/iphn14_blk_frdy/gb/images/prize.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: image/png
Content-Length: 48288
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: "63d7d0b4-bca0"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JUN4vvNFb0aMV1rcUtp%2Bqk0B1zVcMb8lfXMNOZUUy2sfsjNJDzZRpj%2FUR3%2BGz1sY%2FdnBLRFn%2Bo5dmBvOYQTMiaO2V7ArgYavEAfGbOWox8g75f6hqAqZ9jEWtLSJs8SgdmAY7lZrlGGG1g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c06b33b524-OSL
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Last-Modified, Pragma, ETag, Retry-After, Content-Type, Content-Length, Expires, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 31 Jan 2023 01:41:41 GMT
age: 1051
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
iphone.quiztionnaire.uk/cp/_assets/modals/terms/sweep-terms/gb/index.html
104.21.30.84200 OK 2.4 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/terms/sweep-terms/gb/index.html
IP 104.21.30.84:0
Hash f5d7bf2a533e9d1ba7bc736288c1522c
8823cb467f8d30d5a53c1f39a8489cafdbfa9d87
910aa726e197d7d1c194f59e5bc4cad8859b9af9e412cbe021e167865efca281
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/terms/sweep-terms/gb/index.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:12 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:12 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PUN6tJZIBwOU9wpEzbl2M8JsDmeP%2FkOJC%2FeujE53H650bGvWU0q7NkyNz64Pg6l9GSEv5q5%2FPL6KihEDlS2OGKNhle6%2FYv4upqC9oPyX%2FNLLyKlf3nB5p0jT06FDfznl%2BHqxuY6noP3h%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c1cd57b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/terms/sweep-terms/gb/header.html
104.21.30.84200 OK 63 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/terms/sweep-terms/gb/header.html
IP 104.21.30.84:0
File type ASCII text, with no line terminators
Hash 266716a9292478ced2d0f7e665d22bbc
535bb3f5493415b83f5c15de279afa450f8a4c80
6b957e6cf889cbd30bd5de1b527d3fd23fa0843661c8d4568d300471bc4a275a
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/terms/sweep-terms/gb/header.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yFYytO3ELLtJ%2Fn%2FVEeduqeWNILFHpZayaOHcs17q6ThpVWaoQrDwxiazPhRNKHYY6arJzoZ35cM3yPgu07jcNf1RfcP0UE%2Fcd6baFFd4%2FkhyZOomG3WUQ%2BGKxUChwKJcr5JlZZY1Y1bB8A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c1cc200b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/unsubscribe/en/header.html
104.21.30.84200 OK 56 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/unsubscribe/en/header.html
IP 104.21.30.84:0
File type ASCII text, with no line terminators
Hash fa602e339b97b4d40c4d92f8f7219d73
1cb2aa449e6ccd9d52ddbf1c9f24a7974ea39346
5d3af7df9ae2f05d7df213e7faf15dec0be29e6bc3842764515ebc941212bce2
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/unsubscribe/en/header.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ZX9GJn95GLdk7DSAaBWm0ofLEnIy3Vqo%2Fs%2FfnR%2B1tQCYu%2F4UwVt1EZN9L9Rvxp%2BWUCNPOCTSvSsmL0vhHZmALXtnpLuLFOvRIlcFMVpfjRyVd1pII7eJ1ar05IXZJmiGsrBW6Y4ZlnA1A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c1cb9db509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/privacy/gb/header.html
104.21.30.84200 OK 59 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/privacy/gb/header.html
IP 104.21.30.84:0
File type ASCII text, with no line terminators
Hash 4675b802c9dc06beb6c4b7ff4928814d
ac9c4921b47ef5bbc4735f7be9facaa7275bfd32
4399625acf65f8f926fabde068f0067194356e050ea9be737e587887643c75bd
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/privacy/gb/header.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KLazgoCUNbjXt8U0DS0jC%2BGbRwkT4wSxzt%2FBRbSbayvbq9iZTFQAvQTRgytn2oJFdKkitVq7oLmDeoFwj1hGquUueZSK59J8VujVxHjtUzYJfOzomlV4IY06ra8gvzBbbfAixXyM9X4Xrg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c1cbc3b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/unsubscribe/en/index.html
104.21.30.84200 OK 1.8 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/unsubscribe/en/index.html
IP 104.21.30.84:0
File type HTML document text\012- exported SGML document, ASCII text
Hash 693910441731efa24d6e2c55cf926bce
ac941b32df80fd1b29b4cbc5cc5780e076719621
8ae65fc56ae3ad021ff1909047de2d6a5391c4d63c5e7629b640cc8b51f57c7e
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/unsubscribe/en/index.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DD2H%2FNB7I%2FJButSmZ%2Fj9mRF63u5nD%2BMIWmSDGBs9vysY61ZB%2FbrEGjJpHsSHhzaflQkYeGD5tL5qo%2FsFaVaNxZgd5larcfgpKuY1MTeyRW%2F6ggy5wqSyZyhy7WINqdPb4VMcgdY1L1dLgw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c1dbf3b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/privacy/gb/index.html
104.21.30.84200 OK 14 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/privacy/gb/index.html
IP 104.21.30.84:0
File type exported SGML document, Unicode text, UTF-8 text, with very long lines (397)
Hash e5bd526df2f13a5b03b9552c063ab52e
ce204a7897169c5a7915eb38fcb1ff961eb39677
685a6b7b684cf6e26f108649b8da87954051f1508da95b8c511a8583283dad3a
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/privacy/gb/index.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=69ICoz2Nh%2Fka5vwYs0pNBWBGNZidZYgDy%2FRQJItBIPak4ZklFOHnxCS9hqB7LJus0EE5EkyKaFXfHQXSsF9hKShDNwXOmrMbTxG3hY%2Bpj6hCcbq2W8x6tLoU18G%2BfHIAHkAgnPTJDbVgPQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c1cc9db500-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/gdpr/en/index.html
104.21.30.84200 OK 525 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/gdpr/en/index.html
IP 104.21.30.84:0
Hash d500b7a4b288818f71c0e77cbd9ce592
a31be5f57be9d3bf30711be67b88d9b3125a2d40
9265f2129db22426f9b3ac5d3d4880784c9847a7554ebf26d34bace095e64f1c
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/gdpr/en/index.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rWC2C7onz2BF4w5Gqma%2FtdSFzCsrHBOBv201%2BmYspF%2Bu3S3XaUG1BX16M3X1UrDoGXGV5tuJrCxIarG5eGSIxlWXxo9Z5CeBu0S7cru1wmRQeBTc3xGyGU7zPeJtOKychR1PkXhZG5N56g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c24c490b59-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/modals/gdpr/en/header.html
104.21.30.84200 OK 62 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/modals/gdpr/en/header.html
IP 104.21.30.84:0
File type ASCII text, with no line terminators
Hash 4e6136476d80fd0d5c489abf00e8e3f9
c7091a1226db41bbe4256b1485187151cb0b2359
84139de29feedc93f1ecfa8dc5f9874f550e58c6ab80e5b7a2b45884fade2c3a
Analyzer Verdict Alert fortinet Phishing
GET /cp/_assets/modals/gdpr/en/header.html HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Last-Modified: Tue, 31 Jan 2023 01:59:13 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=URSE3iQIljjYUrf%2BCxNokXqjMjwS93ayE%2BKk9BgsQzZ4v7qk0LrRz6XD5178QHMIxdmCpj1n%2FHxImkFCi6RDtu8FUEKWqIwIR89LVveuvVYJQXTtfq5NwjXZ2s%2FxUCO16mhODSEDsenReA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c21d74b50c-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 22b9916fc1fafc9bdc9bb37f9eac8a9a
86f640e134a741a0f906a8e3a0f5c6659dd0e394
a29ee843c8a39551a1507cc6ad949ad509e33aaae8b72c58ac4884bad8b0b38e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A29EE843C8A39551A1507CC6AD949AD509E33AAAE8B72C58AC4884BAD8B0B38E"
Last-Modified: Sun, 29 Jan 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9166
Expires: Tue, 31 Jan 2023 04:31:59 GMT
Date: Tue, 31 Jan 2023 01:59:13 GMT
Connection: keep-alive
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 4fc8492b75599680405862c9f15eb4a4
6c8e8623bd8774e678aba2e4c86e77448d10763f
780f9c49e1013241828a0d98eca45498e1f4d04675a1ec94a7e9504538a512ae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164643
Date: Tue, 31 Jan 2023 01:59:13 GMT
Etag: "63d85614-1d7"
Expires: Wed, 01 Feb 2023 23:43:16 GMT
Last-Modified: Mon, 30 Jan 2023 23:43:16 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rtGW0eZfvYLVvkcGnkUI0-Argr_5yUo4Zvpi5lg6cq227Dk9vmpzMA==
ocsp.pki.goog/s/gts1p5/MDdKwH6SFCg
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/MDdKwH6SFCg
IP 142.250.74.131:0
Hash 8e78ee2f4b7bceda0a0ceccf97cf1e42
43a21bb46762c88abc844155dce3a74e843a0874
accd7c88cc0301ded977f017765878624ed9837fc32667ae2bde3f7693e4b99b
POST /s/gts1p5/MDdKwH6SFCg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1p5/MDdKwH6SFCg
142.250.74.131200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/MDdKwH6SFCg
IP 142.250.74.131:0
Hash 8e78ee2f4b7bceda0a0ceccf97cf1e42
43a21bb46762c88abc844155dce3a74e843a0874
accd7c88cc0301ded977f017765878624ed9837fc32667ae2bde3f7693e4b99b
POST /s/gts1p5/MDdKwH6SFCg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:13 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 4fc8492b75599680405862c9f15eb4a4
6c8e8623bd8774e678aba2e4c86e77448d10763f
780f9c49e1013241828a0d98eca45498e1f4d04675a1ec94a7e9504538a512ae
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164643
Date: Tue, 31 Jan 2023 01:59:13 GMT
Etag: "63d85614-1d7"
Expires: Wed, 01 Feb 2023 23:43:16 GMT
Last-Modified: Mon, 30 Jan 2023 23:43:16 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2g7Gk2r8KIEPugc386vc6h9fGpZt-YSAtdJmmxoO1fBQNbkRqdj8-Q==
kit.fontawesome.com/0711a5d108.js
104.18.23.52200 OK 97 kB URL HTTP/2 kit.fontawesome.com/0711a5d108.js
IP 104.18.23.52:0
Hash 51c57c26073f4d98b00df70bb1c1f4aa
47383de29dda1afb30db6d4465f49637f9c760f6
409fe537dde24c08aad8e854962e64701f99e7be462ae201dc3ce833116199d6
GET /0711a5d108.js HTTP/1.1
Host: kit.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:12 GMT
content-type: text/javascript
access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
access-control-max-age: 3000
cache-control: max-age=60, public, must-revalidate
strict-transport-security: max-age=31536000; preload
vary: origin, accept-encoding, access-control-request-headers, access-control-request-method
x-request-id: Fz9CLjV598KNG5gOM0Wh
cf-cache-status: MISS
server: cloudflare
cf-ray: 791ed8bebad4b4ed-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/bottom_image.png
104.21.30.84500 Internal Server Error 193 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/bottom_image.png
IP 104.21.30.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 53d720b83009f04611ff4c6d6328a507
f9e9192cd0ac7313e7055fc710f8d6370b9dda0c
842f84b2ccad51314214f52f2132fed2b367c649ecadd671e5ed997bb8ca91eb
GET /cp/iphn14_blk_frdy/gb/images/bottom_image.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 500 Internal Server Error
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qttVcOsNzAwlQIwQElQw9OIvGXFEVXBEYalPDKShinT3Ai2H%2BdpxTeaKc76bOjvrC1YTh7gN%2Fb9cKB9rf8%2Fw3MIIzKC%2BtWQqYEcQKF%2BtihqvkS8pBGHlgHb9KRu%2F6qKWDmRuvcMFv2WkpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c44ce60b59-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
100.20.30.105101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 100.20.30.105:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: WtneyI8wiu2pdfcz4nMMdQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: ySWmKpfcNk1fFbqz8omo1tHO240=
iphone.quiztionnaire.uk/cp/_assets/images/row_logos/gb/footer1.png
104.21.30.84200 OK 1.8 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/images/row_logos/gb/footer1.png
IP 104.21.30.84:0
File type PNG image data, 220 x 72, 8-bit colormap, non-interlaced\012- data
Hash 04866b2d462d86c3dc6e5c3a08892afe
75889588c82686745a5ae0db9b72adad6a293678
dc3d94070af4f77dfb97593192683583ad25275199702adec9c15ede34371330
GET /cp/_assets/images/row_logos/gb/footer1.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: image/png
Content-Length: 1784
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: "63d7d090-6f8"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OxrNZeWoJGN4W7VkEYjegYF9eEdqI9CLxj%2BoxTGX7LucqZ9LqIQsfUjty4DNE1Jt0rPJFe1YPE%2FRJrxbinzeGx31uD9l5Y2yRYB4xzUfAGbVcuvq8%2BGYuARago2uxvp0agXz4rwm%2FPgK1A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c44ca2b509-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/_assets/images/row_logos/en/footer2.png
104.21.30.84200 OK 1.7 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/_assets/images/row_logos/en/footer2.png
IP 104.21.30.84:0
File type PNG image data, 220 x 72, 8-bit colormap, non-interlaced\012- data
Hash 319df60cdffaf14a3a97ba8eb00ff58e
f9120afd9961fd0a80992fdd0a4cbdf01d6653f5
fb296ed0b80dd5e05edb9c30764cb21c232677247f8a5e1d23c2f720bed3c203
GET /cp/_assets/images/row_logos/en/footer2.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: image/png
Content-Length: 1722
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:13:36 GMT
ETag: "63d7d090-6ba"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5UBPytMCd5bs4yZvItQ7gSIFl7j3yLT8puyhFalBOcExuJDcG0Mp%2FE6uFMbXSpKdc5sOIKdPGcE%2BXWl3dSupHHVT10z7aUH5r3T%2B5zpGH2ei5qTpwmDXnq76u4mYt%2BaSyLta%2FQgjREsCrQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c44d22b50b-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/background.jpg
104.21.30.84200 OK 22 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/background.jpg
IP 104.21.30.84:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3\012- data
Hash a6233b0f45c596b78932a4436e6852f8
a640a430c5e976c202c0320d69d5c66ec53fbdc0
3b11e9a3c441e6b667fa1c5678e7f66a51e375935e527c77b63002dcd6152649
GET /cp/iphn14_blk_frdy/gb/images/background.jpg HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/css/campaign.css
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: image/jpeg
Content-Length: 22043
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: "63d7d0b4-561b"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xZXBMKBST3VY5jEn%2FZJg%2BKy9Z%2BeVpltiov7hi5Ntv8uhXGePyoO1cEODECH0Cq3yCTBHy9xdoShqvUV4DB7nWFJcpgXUpZ1I9kwmgrV8r9bN9UeiXQKDn3j8YlG%2B77Bu2tz1Qx9gQkKSUg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c43cf2b524-OSL
alt-svc: h2=":443"; ma=60
cdn.quiztionnaire.uk/cp/_assets/css/footer.css
172.67.172.133200 OK 42 kB URL HTTP/2 cdn.quiztionnaire.uk/cp/_assets/css/footer.css
IP 172.67.172.133:0
Hash 70020c7fcfe246955eb83c4ce3fd879a
b2dbb1d18cc327c1ef583738c2191e7f295fbb46
38a166c2e20e3449b72d38a70e22ac7717f7bc3532ad0762628fe9c0486e4255
GET /cp/_assets/css/footer.css HTTP/1.1
Host: cdn.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:12 GMT
content-type: text/css
last-modified: Mon, 30 Jan 2023 14:13:36 GMT
etag: W/"63d7d090-674"
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zp0%2Fna6xz3bBCOIxEFUOfK2bm220IJPB3eTjesyFIqZepSJBbn3NY1QvI8zl%2FWhY1nhKJyMRtIsDDMVieE%2BdJKwZmauF1s1gGLWdRMNYmEctYS0%2BAE7r0usBT0rokQVO7HZeRugDsw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 791ed8bf99de0b3d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prizemob.png
104.21.30.84200 OK 38 kB URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prizemob.png
IP 104.21.30.84:0
File type PNG image data, 550 x 315, 8-bit colormap, non-interlaced\012- data
Hash 64e4522e9092d4759ca1a30c460a1d7c
acedae925c02055b23d63bca1b9a32caf030a229
132c88b6bfc1e043a9465eb552d9d20358260ed73b823dc3855ba3c243fa87ba
GET /cp/iphn14_blk_frdy/gb/images/prizemob.png HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: image/png
Content-Length: 38288
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:12 GMT
ETag: "63d7d0b4-9590"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qhXvZHSMAKo9%2FVSOC1rnlnsnStjFfRrstnbJ0Bn0e%2BOIsULIUjuP8quwmW7bOuU%2FG5X%2FTcQDUzpcXW7uUBq4NzJy2lymOAEnn9EfoGOXSfYw6TpDZpUUMoJpj6exGzAZWpafgVnfCQ15bQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c44e33b50c-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/title_image.gif
104.21.30.84500 Internal Server Error 193 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/title_image.gif
IP 104.21.30.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 53d720b83009f04611ff4c6d6328a507
f9e9192cd0ac7313e7055fc710f8d6370b9dda0c
842f84b2ccad51314214f52f2132fed2b367c649ecadd671e5ed997bb8ca91eb
GET /cp/iphn14_blk_frdy/gb/images/title_image.gif HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 500 Internal Server Error
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=47aK8Ow0O9l65py0Ys%2Faf%2Bip%2Bd485BYGav8bCpxLxoJl1mJY%2FeWKtQXTQjxFyyI9PxDw6vC7Z9lWHWnBgfs3B0TXeHGsKLbvG70pydRtqjX0xjof3t%2BIVjuWEJR%2FrTW3n%2B11c%2FBcKwF%2FyQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c48cfc0b59-OSL
alt-svc: h2=":443"; ma=60
iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prizemob.gif
104.21.30.84500 Internal Server Error 193 B URL HTTP/1.1 iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/images/prizemob.gif
IP 104.21.30.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 53d720b83009f04611ff4c6d6328a507
f9e9192cd0ac7313e7055fc710f8d6370b9dda0c
842f84b2ccad51314214f52f2132fed2b367c649ecadd671e5ed997bb8ca91eb
GET /cp/iphn14_blk_frdy/gb/images/prizemob.gif HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 500 Internal Server Error
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rauo5gRtLOnwUuyblzWrBlqeOY5Zuo%2Fpih%2Fv8N%2Fs%2BGG8NeuEcWriMs9IEH3PwyNv7nvnAXRSKc6dDKpr800AGMnETk27udb%2FQ9xl8KVRPTc%2BTO2pR5oZHYWwbnuTJ9QOCiXldxXM%2FEuXIA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c4cce0b509-OSL
alt-svc: h2=":443"; ma=60
st.formulead.com/assets/css/recent_winners.css
54.230.111.123200 OK 79 kB URL HTTP/2 st.formulead.com/assets/css/recent_winners.css
IP 54.230.111.123:0
Hash d53ca419c9ce3c7d898fe711c5f7f00b
f35d13891c5ebfbcc1dc2e3f6837012932314472
4f3cb6001dfaac296b39a6f4b06d01eac8518ec0acb2fac3f8888649299fd528
GET /assets/css/recent_winners.css HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css
server: nginx/1.19.0
date: Mon, 30 Jan 2023 15:44:24 GMT
last-modified: Thu, 26 Jan 2023 09:06:13 GMT
etag: W/"63d24285-461"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1fLteSaGeCi_z13Ae97VksRLlyzVXARRZ3-LJN5X2DX3JqpeICxZKw==
age: 36889
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a91c3c206b710fa2e7f5fcb0d8e48d44
c687446fb84f9e1d16084e5e4c59a493c50f8d7a
3af5436b3bacbe25482ab75fb5fdc4130f2841e366878f7174df16d13620fef4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3AF5436B3BACBE25482AB75FB5FDC4130F2841E366878F7174DF16D13620FEF4"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6768
Expires: Tue, 31 Jan 2023 03:52:01 GMT
Date: Tue, 31 Jan 2023 01:59:13 GMT
Connection: keep-alive
cdn.formulead.com/v/country
34.78.252.25200 OK 51 B URL HTTP/1.1 cdn.formulead.com/v/country
IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 91440c116c92d75cfc02cd72bd060a82
591d3adc1d1d80e012b0dd0214df1f0438ae37f5
1b35c679adcfb2f8fbf92afcaf9f7a741f3c6273503a54b6c55448e1b2807c80
GET /v/country HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 51
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"33-WR063B0dgOASsN0CFN8fBDiuN/U"
set-cookie: qst.sid=s%3AgwPzGn0gNLcaeUESkZHd0QBjDyJLQ0gF.T92fde6BCz8uVEHbFx45iKy2nMISCmfwId6IzG9WLQg; Path=/; HttpOnly
Vary: Accept-Encoding
iphone.quiztionnaire.uk/favicon.ico
104.21.30.84200 OK 566 B URL HTTP/1.1 iphone.quiztionnaire.uk/favicon.ico
IP 104.21.30.84:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7509350b3ddaf9b4dc8756c61598ac98
f9d27f35d792c36ce4f1ec307563a476c07506ab
bf654afb35dc2ffe110aa8484290126bf5c928e5a66b175b2500e9ba426ec112
GET /favicon.ico HTTP/1.1
Host: iphone.quiztionnaire.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/cp/iphn14_blk_frdy/gb/index.html?pre=1&p_id=5e9e9f943919da56328bce51&aff_click_id=&aff_sub=&aff_sub2=&aff_sub3=&aff_sub4=&aff_sub5=&aff_fbp=&aff_tt=ic&aff_ttp=&ch=&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone
HTTP/1.1 200 OK
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: image/x-icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 30 Jan 2023 14:14:53 GMT
ETag: W/"63d7d0dd-47e"
Access-Control-Allow-Origin: *
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2FTGrlRZ7KmFfKM2syd0LGtsDUVhY5eAIeTCHQUtmrA4pu53RypIfUwptg35tPNGM%2FsAyBkGe8px2qjt8RAFku9vp5bT%2FVS5YXhk%2FOLl8Pws025oaSJsA5alJeAQ3hkNDSkmBtDhSxstLg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791ed8c6ae2fb524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdn.formulead.com/p/5e9e9f943919da56328bce51/feed?sc_domain=iphone.quiztionnaire.uk&cl_ip=91.90.42.154&qb_placement_id=5e9e9f943919da56328bce51&qb_offer_id=607e975a6e70d9ef7767c232&qb_flow_id=607e975a6e70d9ef7767c232&qb_vendor_id=5909b0445163350100cc930c&qb_country=GB&ql_session_id=Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ&pre=1&p_id=5e9e9f943919da56328bce51&aff_tt=ic&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone&sc_url=http%3A%2F%2Fiphone.quiztionnaire.uk%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Fiphn14_blk_frdy%2Fgb%2F&sc_campaign_domain=http%3A%2F%2Fiphone.quiztionnaire.uk&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&stp=1&feed_type=initial
34.78.252.25200 OK 2 B URL HTTP/1.1 cdn.formulead.com/p/5e9e9f943919da56328bce51/feed?sc_domain=iphone.quiztionnaire.uk&cl_ip=91.90.42.154&qb_placement_id=5e9e9f943919da56328bce51&qb_offer_id=607e975a6e70d9ef7767c232&qb_flow_id=607e975a6e70d9ef7767c232&qb_vendor_id=5909b0445163350100cc930c&qb_country=GB&ql_session_id=Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ&pre=1&p_id=5e9e9f943919da56328bce51&aff_tt=ic&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone&sc_url=http%3A%2F%2Fiphone.quiztionnaire.uk%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Fiphn14_blk_frdy%2Fgb%2F&sc_campaign_domain=http%3A%2F%2Fiphone.quiztionnaire.uk&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&stp=1&feed_type=initial
IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /p/5e9e9f943919da56328bce51/feed?sc_domain=iphone.quiztionnaire.uk&cl_ip=91.90.42.154&qb_placement_id=5e9e9f943919da56328bce51&qb_offer_id=607e975a6e70d9ef7767c232&qb_flow_id=607e975a6e70d9ef7767c232&qb_vendor_id=5909b0445163350100cc930c&qb_country=GB&ql_session_id=Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ&pre=1&p_id=5e9e9f943919da56328bce51&aff_tt=ic&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone&sc_url=http%3A%2F%2Fiphone.quiztionnaire.uk%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Fiphn14_blk_frdy%2Fgb%2F&sc_campaign_domain=http%3A%2F%2Fiphone.quiztionnaire.uk&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&stp=1&feed_type=initial HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-iivmxswc,x-request-id,x-session-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 2ac1bcdceabf1fc4e07017906aa8a815
ba00b737325fc50b35af8d851ced0fe13d1cba22
c6c54f5dbbfc40b454b9c67a7972827f500d83b10a1594f7cb56c69158278c08
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=6Le28S4hAAAAAA_HM_1PgW6fsQqLb2dZORF4Hbu-
142.250.74.164200 OK 587 B URL HTTP/2 www.google.com/recaptcha/api.js?render=6Le28S4hAAAAAA_HM_1PgW6fsQqLb2dZORF4Hbu-
IP 142.250.74.164:0
File type ASCII text, with very long lines (884), with no line terminators
Hash bc15736a5ef6bc9932f40ee5ce45dd59
00d9eee14eb2fa4698a0ad6de4f6579ba4ce902c
3d6af3284543eab2b055a4e179ad914afd7d05a0a431c417e9434f6676569ecf
GET /recaptcha/api.js?render=6Le28S4hAAAAAA_HM_1PgW6fsQqLb2dZORF4Hbu- HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 31 Jan 2023 01:59:13 GMT
date: Tue, 31 Jan 2023 01:59:13 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 587
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.formulead.com/v/reverse-dns-lookup
34.78.252.25200 OK 2 B URL HTTP/1.1 cdn.formulead.com/v/reverse-dns-lookup
IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v/reverse-dns-lookup HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lead-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash a5ff07b9b81cdf319f4a57d8d6dbbd6d
736ae15d0ed2068580d35a7cff8b33c0ec87af52
24406eda914ef8f78e1f60d6b54237ea6311f2fdf54b2b63647d84b397b41de0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.formulead.com/p/5e9e9f943919da56328bce51/feed?sc_domain=iphone.quiztionnaire.uk&cl_ip=91.90.42.154&qb_placement_id=5e9e9f943919da56328bce51&qb_offer_id=607e975a6e70d9ef7767c232&qb_flow_id=607e975a6e70d9ef7767c232&qb_vendor_id=5909b0445163350100cc930c&qb_country=GB&ql_session_id=Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ&pre=1&p_id=5e9e9f943919da56328bce51&aff_tt=ic&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone&sc_url=http%3A%2F%2Fiphone.quiztionnaire.uk%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Fiphn14_blk_frdy%2Fgb%2F&sc_campaign_domain=http%3A%2F%2Fiphone.quiztionnaire.uk&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&stp=1&feed_type=initial
34.78.252.25200 OK 5.5 kB URL HTTP/1.1 cdn.formulead.com/p/5e9e9f943919da56328bce51/feed?sc_domain=iphone.quiztionnaire.uk&cl_ip=91.90.42.154&qb_placement_id=5e9e9f943919da56328bce51&qb_offer_id=607e975a6e70d9ef7767c232&qb_flow_id=607e975a6e70d9ef7767c232&qb_vendor_id=5909b0445163350100cc930c&qb_country=GB&ql_session_id=Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ&pre=1&p_id=5e9e9f943919da56328bce51&aff_tt=ic&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone&sc_url=http%3A%2F%2Fiphone.quiztionnaire.uk%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Fiphn14_blk_frdy%2Fgb%2F&sc_campaign_domain=http%3A%2F%2Fiphone.quiztionnaire.uk&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&stp=1&feed_type=initial
IP 34.78.252.25:0
File type JSON data\012- HTML document, Unicode text, UTF-8 text, with very long lines (23235), with no line terminators
Hash 4f6c21f1cf3d253ec055093335637723
43169c354f6746d199afef437c09ec454a815678
3f60ddcfd8fcb2085565886177f25d83668b57353b10290ce3b50baa16ad5d67
GET /p/5e9e9f943919da56328bce51/feed?sc_domain=iphone.quiztionnaire.uk&cl_ip=91.90.42.154&qb_placement_id=5e9e9f943919da56328bce51&qb_offer_id=607e975a6e70d9ef7767c232&qb_flow_id=607e975a6e70d9ef7767c232&qb_vendor_id=5909b0445163350100cc930c&qb_country=GB&ql_session_id=Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ&pre=1&p_id=5e9e9f943919da56328bce51&aff_tt=ic&aff_vl=undefined&request_id=190113087faba784c2aa95b83ce0a644&aff_id=1339&aff_code=LDA&aff_adv_id=2&aff_inc=iphone&sc_url=http%3A%2F%2Fiphone.quiztionnaire.uk%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&sc_campaign_page=index.html&sc_campaign_path=%2Fcp%2Fiphn14_blk_frdy%2Fgb%2F&sc_campaign_domain=http%3A%2F%2Fiphone.quiztionnaire.uk&sc_url_wl=https%3A%2F%2Flp.nectarjunkie.com%2Fcp%2Fiphn14_blk_frdy%2Fgb%2Findex.html&stp=1&feed_type=initial HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ.93ERHXomdIEMnjunu5XMP2kszfZMXntdFX4aU3Mnul0
X-Request-Id: d1b0e9f855705ac28570eefd
X-iivmxswc: 004d947e91d045f268574c7566a1af838933f12ae09c2cbd4a71c65a2681508d
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Set-Cookie: stp=1; Path=/; Expires=Thu, 30 Jan 2025 01:59:13 GMT; Secure; SameSite=None
ck_tsp=2023-01-31T01%3A59%3A13.895Z; Path=/; Expires=Thu, 30 Jan 2025 01:59:13 GMT; Secure; SameSite=None
sip=91.90.42.154; Path=/; Expires=Thu, 30 Jan 2025 01:59:13 GMT; Secure; SameSite=None
ETag: W/"5b9a-xvysj1DO2hDnUDdBsMBimiGujFs"
Vary: Accept-Encoding
Content-Encoding: gzip
cdn.formulead.com/v/reverse-dns-lookup
34.78.252.25200 OK 16 B URL HTTP/1.1 cdn.formulead.com/v/reverse-dns-lookup
IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /v/reverse-dns-lookup HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Lead-Id: d1b0e9f855705ac28570eefd
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:13 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
set-cookie: qst.sid=s%3AGiQU_V5111le2ZVgEgWpc0Thxbp5KfWw.rcaIu8CeeDLW9tqoRk2afdBdT%2B9l%2Fl6A78lNAy7aVwA; Path=/; HttpOnly
Vary: Accept-Encoding
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
142.250.74.35200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (771)
Size 164 kB (163774 bytes)
Hash 57c909ab73fc27ec24f737bbf1cb1de8
89b2c02e9e7a9a764518fca545d3eec2044fd6d9
7e407e2b00bb7c238c71d96472f7ab030de4e610b1048f0f77b25cb85c2d166b
GET /recaptcha/releases/RGRQD9tdxHtnt-Bxkx9pM75S/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163774
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 30 Jan 2023 17:09:34 GMT
expires: Tue, 30 Jan 2024 17:09:34 GMT
cache-control: public, max-age=31536000
age: 31780
last-modified: Mon, 23 Jan 2023 01:02:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash f075625a67cefc01c034a3c732ec8023
c3ef563fbf1cf30f75fc931f82426a0f859ccb6d
75ce941806680157fcca91d6074496cbbc7cdcf6da28fa35384273bf9a76d588
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 31 Jan 2023 01:59:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
st.formulead.com/assets/js/helpers.js
54.230.111.123200 OK 16 kB URL HTTP/2 st.formulead.com/assets/js/helpers.js
IP 54.230.111.123:0
Hash 2a2a161cc5c482ec2a8c32f33b6da930
dadd5908ae904085d86947e5abe5df04aaf8508f
3f75c5b0eb9c8f9c3356fd4530a22300cf885f644ee3d790aa61757df8883730
GET /assets/js/helpers.js HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=utf8
server: nginx/1.19.0
date: Mon, 30 Jan 2023 15:44:24 GMT
last-modified: Thu, 26 Jan 2023 09:06:13 GMT
etag: W/"63d24285-12044"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JbdLPMhWVGQb6ykEzirHBj3_2JnJ2uRMQ6ECMTfGCK0QJ3RvXMC_zQ==
age: 36889
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5499
Expires: Tue, 31 Jan 2023 03:30:53 GMT
Date: Tue, 31 Jan 2023 01:59:14 GMT
Connection: keep-alive
cdn.formulead.cloud/p/5e9e9f943919da56328bce51/p.js
172.67.72.68200 OK 425 kB URL HTTP/2 cdn.formulead.cloud/p/5e9e9f943919da56328bce51/p.js
IP 172.67.72.68:0
File type ASCII text, with very long lines (65536), with no line terminators
Size 425 kB (425257 bytes)
Hash 0e5c0e6620077efe1eedbd6ef0fb8d82
f14d37d0b8cfb97831653faa7dccd7f26eea3e51
0ca0859eeb197aedfbf8696ea533d738f6081341715a55cf46a93dbdf0ff96e9
GET /p/5e9e9f943919da56328bce51/p.js HTTP/1.1
Host: cdn.formulead.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:13 GMT
content-type: text/javascript; charset=utf-8
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
pragma: no-cache
cache-control: no-cache
set-cookie: lid=; Path=/; Expires=Thu, 01 Jan 1970 00:00:00 GMT
plc=5e9e9f943919da56328bce51; Path=/; Expires=Thu, 30 Jan 2025 01:59:13 GMT; Secure; SameSite=None
qst.sid=s%3AFi36sI5IHd5F71omveUJ6i5PdVwvVdkQ.93ERHXomdIEMnjunu5XMP2kszfZMXntdFX4aU3Mnul0; Path=/; HttpOnly
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HyGCWHwIBUy6wSaQYL1gZDUQl6OIV85%2BJvI99DaG3iJFal8oPIfbOZUF%2BrMyMVvEpYCCkbDjGDo5BLqxe1CUKd2MnbG2pejtToMncLDv5lBoEXkAhakRtca2XmKP5e%2B4S4cFtaI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8c35a83b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5499
Expires: Tue, 31 Jan 2023 03:30:53 GMT
Date: Tue, 31 Jan 2023 01:59:14 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5499
Expires: Tue, 31 Jan 2023 03:30:53 GMT
Date: Tue, 31 Jan 2023 01:59:14 GMT
Connection: keep-alive
cdn.formulead.cloud/p/5e9e9f943919da56328bce51/feed?stp=1&feed_type=full
172.67.72.68200 OK 2 B URL HTTP/2 cdn.formulead.cloud/p/5e9e9f943919da56328bce51/feed?stp=1&feed_type=full
IP 172.67.72.68:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /p/5e9e9f943919da56328bce51/feed?stp=1&feed_type=full HTTP/1.1
Host: cdn.formulead.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-iivmxswc,x-request-id,x-session-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:14 GMT
content-type: text/plain; charset=utf-8
content-length: 2
x-powered-by: Express
access-control-allow-origin: http://iphone.quiztionnaire.uk
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NVQxzxYGqK4bYTHT4WIlK8y%2FCFVIn%2Bn9U35irvhet%2FW8qDAFIJ9LiZUMxWs%2FTO1WUkNkcdXQMhth52TPPRngMwB%2FJDNvbg3C9mHtdB%2FPU1McekoJrO%2FNyCoLVSppF8Ri5kDMBjY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8cc9e65b51e-OSL
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6c0b4d2-6327-4501-8fe0-017b08501835.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6c0b4d2-6327-4501-8fe0-017b08501835.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ee0e708ca11a9468634d2a7dff56510f
40d7c0f07b5218c4ceabcd7fc90af26bb3dc2cf3
e944a184377a91dae9fbc38ebc686fb95e261cb16ae09c7d69ababacffa75e57
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa6c0b4d2-6327-4501-8fe0-017b08501835.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8529
x-amzn-requestid: 633fc342-7b5a-4103-970e-74730c08679b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fbhguFesIAMFqVQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d47c6a-38e274c36d39ef4f2dd6034a;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 01:37:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: URqrtcPijXsHDSPMQ3K9PHbq20O0KYuk3YyO91rNW7t10zCuF3g5wg==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 10:29:22 GMT
age: 55792
etag: "40d7c0f07b5218c4ceabcd7fc90af26bb3dc2cf3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4a2d26da68a313cc65958fc2692351c2
798c3538f3147ca77d317676ddd1bf040bd0f93b
76ce30224803d680c0115e987a712ce5552b2760beadf796a96b17439fb20797
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b71db36-11cb-45f6-a296-34813aea1c35.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10898
x-amzn-requestid: e29f8dfc-07d4-4136-afaf-e1e067eea2ab
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fk3zxGshIAMFw5Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d839b1-5e87d2a44722af9e4e86c3d4;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 21:42:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: XYo_QvM8GWDyulOtUb5nVjS9PxOinaRJ3lYvCreeqd_9tHI5yv5xcQ==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 21:48:21 GMT
age: 15053
etag: "798c3538f3147ca77d317676ddd1bf040bd0f93b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffea501ff-acf4-4b37-aa0a-baf417cf3694.jpeg
34.120.237.76200 OK 5.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffea501ff-acf4-4b37-aa0a-baf417cf3694.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 60fc180ec5b99ac357db8775775c3c11
c9856a488e82bc330881377528bf2e53274ef5f3
a31fd6fc84f79b0f5fb79cccf490ddf61eb58bdaf57ca27f57a911332e550d11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffea501ff-acf4-4b37-aa0a-baf417cf3694.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5394
x-amzn-requestid: 16d876fb-0afd-4b5d-b19e-1029506fd6f6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIgq2E4CIAMFiFA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce178-1f08dc2105b6e182677004e7;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:10:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 36E3JCGqpkeMmb_fzM0DTb24ElUMGDdikE1IdqQABDlbT28XRs7B-w==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 11:52:37 GMT
age: 50797
etag: "c9856a488e82bc330881377528bf2e53274ef5f3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd328471c-fc31-49a3-ae71-21d6171a8237.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd328471c-fc31-49a3-ae71-21d6171a8237.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1e575f4c5e3aa793f846cadc8baf386c
f482a4e8e80ea5b6afc29e5cc1a9a2b8c2f0434d
09a5bbe4fb7f23ee43228267f30c1ef0cd8747e515e01c963df0756b866f23ea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd328471c-fc31-49a3-ae71-21d6171a8237.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9700
x-amzn-requestid: 059475a7-d7de-4a44-9fc7-11fb24e201b6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ffB_9G8DIAMF64A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d5e399-57fea3031d1e93ec02308fac;Sampled=0
x-amzn-remapped-date: Sun, 29 Jan 2023 03:10:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: vzubP2I1xR5NF1amWIPiIlp6yPykWhz-CEbwDiJOs-eTWkTE-fvfjA==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Mon, 30 Jan 2023 03:51:25 GMT
age: 79669
etag: "f482a4e8e80ea5b6afc29e5cc1a9a2b8c2f0434d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.formulead.com/t/errors
34.78.252.25200 OK 2 B URL HTTP/1.1 cdn.formulead.com/t/errors
IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /t/errors HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-session-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:14 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
cdn.formulead.com/t/errors
34.78.252.25200 OK 16 B URL HTTP/1.1 cdn.formulead.com/t/errors
IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /t/errors HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ.93ERHXomdIEMnjunu5XMP2kszfZMXntdFX4aU3Mnul0
Content-Type: application/json
Content-Length: 153
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
Vary: Accept-Encoding
cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228
34.78.252.25200 OK 2 B URL HTTP/1.1 cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228
IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lead-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:14 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228
34.78.252.25200 OK 16 B URL HTTP/1.1 cdn.formulead.com/v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228
IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
GET /v/fingerprint-cache?vl_fp=9233aa210fa7da7061a624224377a2bb&vl_fp_cljs=803716228 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Lead-Id: d1b0e9f855705ac28570eefd
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Cookie: stp=1; ck_tsp=2023-01-31T01%3A59%3A13.895Z; sip=91.90.42.154
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:14 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
set-cookie: qst.sid=s%3AtovJXAdqgGcHSNWqVPzZcWdsp5-6HfLR.ihMLQuabZ1RItjBD0Ki632kqwAjHrrtdlZrJE4Ylfnw; Path=/; HttpOnly
Vary: Accept-Encoding
event.trk-consulatu.com/register/event_log/l4ev5zv6g1
172.64.207.35200 OK 0 B URL HTTP/2 event.trk-consulatu.com/register/event_log/l4ev5zv6g1
IP 172.64.207.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /register/event_log/l4ev5zv6g1 HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:15 GMT
content-length: 0
access-control-allow-headers: content-type
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: http://iphone.quiztionnaire.uk
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-allow-methods: POST
access-control-max-age: 1800
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=emboL3mwFUV1SnJvUrYIekRRXFxzzijJ7ym15VCGS54AeMEQfYQefEABmEVfgo2MKC4lRCp8ufabABrQDHCAWAXgoGcsKit%2BIEke9rkHemZq8knj%2BSfLEVsiQ7J%2FtSIXuc9Q%2BToWH%2Bm4vA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8cdd96d74e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.35200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 21:48:03 GMT
expires: Fri, 26 Jan 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 360672
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.35200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.35:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 16:40:43 GMT
expires: Fri, 26 Jan 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 379112
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.formulead.com/t/page
34.78.252.25200 OK 2 B IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /t/page HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-session-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:15 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
event.trk-consulatu.com/register/event_log/l4ev5zv6g1
172.64.207.35200 OK 0 B URL HTTP/2 event.trk-consulatu.com/register/event_log/l4ev5zv6g1
IP 172.64.207.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /register/event_log/l4ev5zv6g1 HTTP/1.1
Host: event.trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://iphone.quiztionnaire.uk/
Content-type: application/json
Origin: http://iphone.quiztionnaire.uk
Content-Length: 103
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:15 GMT
content-length: 0
expires: 0
cache-control: no-cache, no-store, max-age=0, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
referrer-policy: strict-origin-when-cross-origin
x-pushplatformapp-params:
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
x-pushplatformapp-alert: pushPlatformApp.pushSubscription.deleted
x-frame-options: DENY
access-control-expose-headers: Authorization, Link, X-Total-Count
access-control-allow-origin: http://iphone.quiztionnaire.uk
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
access-control-allow-credentials: true
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J4AUYZQJfrlGwnm3agSOM4%2By8n31ru8b7Y3st3Q4PMc7SyvAIounvl%2FJiCE67YCCKGDJA%2BUzREfVEkV3%2BdqNykE3GPVCsd2%2F9AkrviF0Ek4J3piZMCLwbp%2B5TLDI0GAlklWEGcGSV%2FSKpg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8cf19fa74e1-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.formulead.com/v/recaptcha3?token=03AFY_a8VY7-GGmi-rdJ3iBO99w9Fxo7QhWrjr_IjQmFARR9cU-NKwM3UVHf8yuGT4A6Ko48x3NvbTZK58hgnhECsij7EiK0sIFRWiLMzJVhlT8eAICgiCVMzS-xIRj8xlWwtBgMOaUhUM0NL15Lb02JEihkQCUUrLaOX9Wq_QzEHM18mcDFzviNlIIIIKwgo5e-9ccYzKb6IlOPUqu3q5fJTT7iKAKzCnK9ZV8k32zerUV-KFvBx3NyiNz96usDhd8VlGbdGCUz-5kDIiL8bnxtQeWXoM3BQtBfUhpP14_sc4k_IF8vLmiKHhp6FyApN9sUqmjCEHZO4qaIQLyUNfNEdIMazoWOn2-rbXRCgtC9YPohR8QIqIMm49QI-mZxKnokTzqHLgnkA8L3d_0CNbGpZBNasq6-D9V64i7g4vGT5znR80pnPqdiTwafPk3Q8ZILbkVs4HQTwhFrOH3KTmR9QjOKPvzwfIYNquz_2lbzGIbH-mteCDtd0oSrPztnHOdzDksIIecbIHovhy3SNW1Fd--WjkRbmKnw&step=1
34.78.252.25200 OK 2 B URL HTTP/1.1 cdn.formulead.com/v/recaptcha3?token=03AFY_a8VY7-GGmi-rdJ3iBO99w9Fxo7QhWrjr_IjQmFARR9cU-NKwM3UVHf8yuGT4A6Ko48x3NvbTZK58hgnhECsij7EiK0sIFRWiLMzJVhlT8eAICgiCVMzS-xIRj8xlWwtBgMOaUhUM0NL15Lb02JEihkQCUUrLaOX9Wq_QzEHM18mcDFzviNlIIIIKwgo5e-9ccYzKb6IlOPUqu3q5fJTT7iKAKzCnK9ZV8k32zerUV-KFvBx3NyiNz96usDhd8VlGbdGCUz-5kDIiL8bnxtQeWXoM3BQtBfUhpP14_sc4k_IF8vLmiKHhp6FyApN9sUqmjCEHZO4qaIQLyUNfNEdIMazoWOn2-rbXRCgtC9YPohR8QIqIMm49QI-mZxKnokTzqHLgnkA8L3d_0CNbGpZBNasq6-D9V64i7g4vGT5znR80pnPqdiTwafPk3Q8ZILbkVs4HQTwhFrOH3KTmR9QjOKPvzwfIYNquz_2lbzGIbH-mteCDtd0oSrPztnHOdzDksIIecbIHovhy3SNW1Fd--WjkRbmKnw&step=1
IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /v/recaptcha3?token=03AFY_a8VY7-GGmi-rdJ3iBO99w9Fxo7QhWrjr_IjQmFARR9cU-NKwM3UVHf8yuGT4A6Ko48x3NvbTZK58hgnhECsij7EiK0sIFRWiLMzJVhlT8eAICgiCVMzS-xIRj8xlWwtBgMOaUhUM0NL15Lb02JEihkQCUUrLaOX9Wq_QzEHM18mcDFzviNlIIIIKwgo5e-9ccYzKb6IlOPUqu3q5fJTT7iKAKzCnK9ZV8k32zerUV-KFvBx3NyiNz96usDhd8VlGbdGCUz-5kDIiL8bnxtQeWXoM3BQtBfUhpP14_sc4k_IF8vLmiKHhp6FyApN9sUqmjCEHZO4qaIQLyUNfNEdIMazoWOn2-rbXRCgtC9YPohR8QIqIMm49QI-mZxKnokTzqHLgnkA8L3d_0CNbGpZBNasq6-D9V64i7g4vGT5znR80pnPqdiTwafPk3Q8ZILbkVs4HQTwhFrOH3KTmR9QjOKPvzwfIYNquz_2lbzGIbH-mteCDtd0oSrPztnHOdzDksIIecbIHovhy3SNW1Fd--WjkRbmKnw&step=1 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-lead-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:15 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
cdn.formulead.com/v/recaptcha3?token=03AFY_a8VY7-GGmi-rdJ3iBO99w9Fxo7QhWrjr_IjQmFARR9cU-NKwM3UVHf8yuGT4A6Ko48x3NvbTZK58hgnhECsij7EiK0sIFRWiLMzJVhlT8eAICgiCVMzS-xIRj8xlWwtBgMOaUhUM0NL15Lb02JEihkQCUUrLaOX9Wq_QzEHM18mcDFzviNlIIIIKwgo5e-9ccYzKb6IlOPUqu3q5fJTT7iKAKzCnK9ZV8k32zerUV-KFvBx3NyiNz96usDhd8VlGbdGCUz-5kDIiL8bnxtQeWXoM3BQtBfUhpP14_sc4k_IF8vLmiKHhp6FyApN9sUqmjCEHZO4qaIQLyUNfNEdIMazoWOn2-rbXRCgtC9YPohR8QIqIMm49QI-mZxKnokTzqHLgnkA8L3d_0CNbGpZBNasq6-D9V64i7g4vGT5znR80pnPqdiTwafPk3Q8ZILbkVs4HQTwhFrOH3KTmR9QjOKPvzwfIYNquz_2lbzGIbH-mteCDtd0oSrPztnHOdzDksIIecbIHovhy3SNW1Fd--WjkRbmKnw&step=1
34.78.252.25200 OK 170 B URL HTTP/1.1 cdn.formulead.com/v/recaptcha3?token=03AFY_a8VY7-GGmi-rdJ3iBO99w9Fxo7QhWrjr_IjQmFARR9cU-NKwM3UVHf8yuGT4A6Ko48x3NvbTZK58hgnhECsij7EiK0sIFRWiLMzJVhlT8eAICgiCVMzS-xIRj8xlWwtBgMOaUhUM0NL15Lb02JEihkQCUUrLaOX9Wq_QzEHM18mcDFzviNlIIIIKwgo5e-9ccYzKb6IlOPUqu3q5fJTT7iKAKzCnK9ZV8k32zerUV-KFvBx3NyiNz96usDhd8VlGbdGCUz-5kDIiL8bnxtQeWXoM3BQtBfUhpP14_sc4k_IF8vLmiKHhp6FyApN9sUqmjCEHZO4qaIQLyUNfNEdIMazoWOn2-rbXRCgtC9YPohR8QIqIMm49QI-mZxKnokTzqHLgnkA8L3d_0CNbGpZBNasq6-D9V64i7g4vGT5znR80pnPqdiTwafPk3Q8ZILbkVs4HQTwhFrOH3KTmR9QjOKPvzwfIYNquz_2lbzGIbH-mteCDtd0oSrPztnHOdzDksIIecbIHovhy3SNW1Fd--WjkRbmKnw&step=1
IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 8a20b0f19ca209998cc8a8c7b807c16f
0e7ea257f95012c78a99ac4213cda501c64454b9
7acb3c6fdb25385f912a4caf43dceaf954d0408916b2bb19139354aee362bff7
GET /v/recaptcha3?token=03AFY_a8VY7-GGmi-rdJ3iBO99w9Fxo7QhWrjr_IjQmFARR9cU-NKwM3UVHf8yuGT4A6Ko48x3NvbTZK58hgnhECsij7EiK0sIFRWiLMzJVhlT8eAICgiCVMzS-xIRj8xlWwtBgMOaUhUM0NL15Lb02JEihkQCUUrLaOX9Wq_QzEHM18mcDFzviNlIIIIKwgo5e-9ccYzKb6IlOPUqu3q5fJTT7iKAKzCnK9ZV8k32zerUV-KFvBx3NyiNz96usDhd8VlGbdGCUz-5kDIiL8bnxtQeWXoM3BQtBfUhpP14_sc4k_IF8vLmiKHhp6FyApN9sUqmjCEHZO4qaIQLyUNfNEdIMazoWOn2-rbXRCgtC9YPohR8QIqIMm49QI-mZxKnokTzqHLgnkA8L3d_0CNbGpZBNasq6-D9V64i7g4vGT5znR80pnPqdiTwafPk3Q8ZILbkVs4HQTwhFrOH3KTmR9QjOKPvzwfIYNquz_2lbzGIbH-mteCDtd0oSrPztnHOdzDksIIecbIHovhy3SNW1Fd--WjkRbmKnw&step=1 HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Lead-Id: d1b0e9f855705ac28570eefd
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Cookie: stp=1; ck_tsp=2023-01-31T01%3A59%3A13.895Z; sip=91.90.42.154
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 170
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"aa-Dn6iV/lQEseKmaxCE82lAcZEVLk"
set-cookie: qst.sid=s%3Adv2qQSGN9ehyIo2YEiH4z4GwtV9yaQxe.YJayxiRhHrAlUDgYXuqMDluXKsb9OxTucXHbL1UcWkY; Path=/; HttpOnly
Vary: Accept-Encoding
cdn.formulead.com/t/vdt
34.78.252.25200 OK 2 B IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /t/vdt HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-ofvuinwk,x-session-id,x-zqhkygow
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:15 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
cdn.formulead.com/t/vdt
34.78.252.25200 OK 16 B IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /t/vdt HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ.93ERHXomdIEMnjunu5XMP2kszfZMXntdFX4aU3Mnul0
Content-Type: application/json
x-zqhkygow: aea095746b412c304b1e8a6705197b520a6c7e7252cffb4fdf171bc20ff2b2b5
x-ofvuinwk: 254b3001b1c45e03cb1ce9cb3f5f4f5c9928ba9e06d2f53c1ba807cb0e15a211
Content-Length: 1855
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:16 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
Vary: Accept-Encoding
cdn.formulead.com/t/page
34.78.252.25200 OK 16 B IP 34.78.252.25:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 7363e85fe9edee6f053a4b319588c086
a15e2127145548437173fc17f3e980e3f3dee2d0
c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97
POST /t/page HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ.93ERHXomdIEMnjunu5XMP2kszfZMXntdFX4aU3Mnul0
Content-Type: application/json
Content-Length: 146
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:17 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 16
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
Pragma: no-cache
Cache-Control: no-cache
ETag: W/"10-oV4hJxRVSENxc/wX8+mA4/Pe4tA"
Vary: Accept-Encoding
cdn.formulead.com/t/page
34.78.252.25200 OK 2 B IP 34.78.252.25:0
File type ASCII text, with no line terminators
Hash e0aa021e21dddbd6d8cecec71e9cf564
9ce3bd4224c8c1780db56b4125ecf3f24bf748b7
565339bc4d33d72817b583024112eb7f5cdf3e5eef0252d6ec1b9c9a94e12bb3
OPTIONS /t/page HTTP/1.1
Host: cdn.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-session-id
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.0
Date: Tue, 31 Jan 2023 01:59:20 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 2
Connection: keep-alive
X-Powered-By: Express
Access-Control-Allow-Origin: http://iphone.quiztionnaire.uk
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Expose-Headers: Content-Length
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc"
Vary: Accept-Encoding
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=0711a5d108
172.64.169.22200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-font-face.min.css?token=0711a5d108
IP 172.64.169.22:0
GET /releases/v5.15.4/css/free-v4-font-face.min.css?token=0711a5d108 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:12 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"f2e0b2680d9b0bcb6e0039c4424e5a59"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 6379820fbac3eca5570c58b520f7931e.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P8
x-amz-cf-id: ziSH_j2ZU2tERmC-La60kYQcVP5RxKnWHCXQSDwd9UnSlnGAlmd9rA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=saQTSL0O%2FXYIzJIWEBmanN69cobRUbo74YFMvvrH7lEh32F%2FTZlq4qqEngvf7t0pRB9BvXjDu0%2FIoT%2FuG2nJ0ukueFxp0Al%2Fdqb7GpCR4UC1Q0fzjVMuB6BYVG68FU9xFNcaaWH%2BDA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8c17aad74c9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=0711a5d108
172.64.169.22200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free-v4-shims.min.css?token=0711a5d108
IP 172.64.169.22:0
GET /releases/v5.15.4/css/free-v4-shims.min.css?token=0711a5d108 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:12 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"76f34b71fc9fb641507ff6a822cc07f5"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4810d74d0025d8ce3dbab6cb71a901d2.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P8
x-amz-cf-id: BDLvoMiKvtL5eReHhlWzrJWvh7__bJKD3_eVRqwVR74pHQ3xfTecJA==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RgsfXYLHfv056GkE7wgu%2FB5P%2BUUhcvOZ%2BrA%2Bh4WwCc%2BypHKghkhDpVXe0hOILRhhL20INTqcwaEXutuK9eL8NrGs%2Ftpr2zJEmLRtDrnaGw6BMXsDkhHVhLDDzuoVtNUkpC2l4rOnLg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8c17aaa74c9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
st.formulead.com/assets/js/bioep.min.js
54.230.111.123200 OK 0 B URL HTTP/2 st.formulead.com/assets/js/bioep.min.js
IP 54.230.111.123:0
GET /assets/js/bioep.min.js HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf8
server: nginx/1.19.0
date: Mon, 30 Jan 2023 15:44:24 GMT
last-modified: Thu, 26 Jan 2023 09:06:13 GMT
etag: W/"63d24285-14c4"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4rduWhtqsAlk_94VSYwq7Pepy4b76NL5K1-Aa-TmxuXf9FJ7Juycuw==
age: 36889
X-Firefox-Spdy: h2
st.formulead.com/assets/js/dl_modified.js
54.230.111.123200 OK 0 B URL HTTP/2 st.formulead.com/assets/js/dl_modified.js
IP 54.230.111.123:0
GET /assets/js/dl_modified.js HTTP/1.1
Host: st.formulead.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=utf8
server: nginx/1.19.0
date: Mon, 30 Jan 2023 15:44:24 GMT
last-modified: Thu, 26 Jan 2023 09:06:13 GMT
etag: W/"63d24285-132f"
access-control-allow-origin: *
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QU2k9fQoC0EvLd6VTpXFMuOvyMMmfMn0h-MBX2JWfL0SR8juvl3lkw==
age: 36890
X-Firefox-Spdy: h2
ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=0711a5d108
172.64.169.22200 OK 0 B URL HTTP/2 ka-f.fontawesome.com/releases/v5.15.4/css/free.min.css?token=0711a5d108
IP 172.64.169.22:0
GET /releases/v5.15.4/css/free.min.css?token=0711a5d108 HTTP/1.1
Host: ka-f.fontawesome.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://iphone.quiztionnaire.uk/
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:13 GMT
content-type: text/css
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
last-modified: Wed, 04 Aug 2021 18:53:09 GMT
etag: W/"a12ec7ebe75a4d59a5dd6b79e2ba2e16"
cache-control: max-age=31556926
access-control-allow-headers: fa-kit-token
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 922167d169fb5d47cad92d0fd0cd14aa.cloudfront.net (CloudFront)
x-amz-cf-pop: JFK50-P8
x-amz-cf-id: _5V4EDlL2jGkM0dT-l2pWGjIWBCxprI-sW0FpG_DJLdoUuGicQW18w==
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BwDGf%2FtN0OutDAVHjThHqPu1PxUy3TU3cUNwgiyILCKqgCZKx6m5SNiimNSDRLPB%2B8WU%2FVPJmMEsrIcS%2F7l7qHRsrSczwco7p4A%2FpHqzzMjvIVtPeKpjeN%2FhyiQP34wWKPMY09luRg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8c17aac74c9-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.formulead.cloud/p/5e9e9f943919da56328bce51/feed?stp=1&feed_type=full
172.67.72.68200 OK 0 B URL HTTP/2 cdn.formulead.cloud/p/5e9e9f943919da56328bce51/feed?stp=1&feed_type=full
IP 172.67.72.68:0
GET /p/5e9e9f943919da56328bce51/feed?stp=1&feed_type=full HTTP/1.1
Host: cdn.formulead.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Session-Id: s:Fi36sI5IHd5F71omveUJ6i5PdVwvVdkQ.93ERHXomdIEMnjunu5XMP2kszfZMXntdFX4aU3Mnul0
X-Request-Id: d1b0e9f855705ac28570eefd
X-iivmxswc: 004d947e91d045f268574c7566a1af838933f12ae09c2cbd4a71c65a2681508d
Origin: http://iphone.quiztionnaire.uk
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Cookie: plc=5e9e9f943919da56328bce51
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:19 GMT
content-type: application/json; charset=utf-8
x-powered-by: Express
access-control-allow-origin: http://iphone.quiztionnaire.uk
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
etag: W/"4fc62-A4b1SgIoo0zXqsB56+qfZpe3l+E"
vary: Accept-Encoding
cache-control: max-age=3600
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5wpzORgZgFN%2B81pPCnBXD1A5ht4GshzUz9ZY%2BGvEYtsj2hwLnMvlDyzygNNgEdY%2Bn6cYXvx%2FGHRfUi0PtwYiWV1Xe9gRCvYdXNPEp%2Bqco17Bo4Xw62GkcWjrqVaZoIH5zR63hak%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8ccde87b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
cdn.formulead.cloud/css/main.min.css
172.67.72.68200 OK 0 B URL HTTP/2 cdn.formulead.cloud/css/main.min.css
IP 172.67.72.68:0
GET /css/main.min.css HTTP/1.1
Host: cdn.formulead.cloud
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:13 GMT
content-type: text/css; charset=UTF-8
x-powered-by: Express
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers: Content-Length
access-control-allow-credentials: true
access-control-allow-headers: X-Requested-With, Content-Type, X-CSRF-Token, X-Session-Id, X-Offer-Id, X-Flow-Id, X-Flow_Id, X-Placement-Id, X-Placement_Id, X-Lead-Id, X-Sig, X-iivmxswc, X-Request-id, X-zqhkygow, X-ofvuinwk
cache-control: public, max-age=2678400
last-modified: Mon, 16 Jan 2023 16:19:09 GMT
etag: W/"b267e-185bb609c48"
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FjTXCDZx0b%2F8TDwfwiWFIMK4RTfvEOdPgvhHxrU4DDvO8mpj9msfop0XQ71zNOXGnTbIGSpIIcrVSNAvnX5HfZ%2FILrIV8c5ugqMX6%2B8LteUAGJBgwi2JpQUQ6X4OeD9kWjX1T6Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8c35a7eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
trk-consulatu.com/scripts/push/script/z75dnkdk4q?url=iphone.quiztionnaire.uk
172.64.206.35200 OK 0 B URL HTTP/2 trk-consulatu.com/scripts/push/script/z75dnkdk4q?url=iphone.quiztionnaire.uk
IP 172.64.206.35:0
GET /scripts/push/script/z75dnkdk4q?url=iphone.quiztionnaire.uk HTTP/1.1
Host: trk-consulatu.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://iphone.quiztionnaire.uk/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 31 Jan 2023 01:59:14 GMT
content-type: application/javascript;charset=UTF-8
expires: 0
cache-control: max-age=14400, must-revalidate
x-xss-protection: 1; mode=block
pragma: no-cache
x-frame-options: DENY
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; frame-src 'self' data:; connect-src 'self' https://cdn-media-2020.s3.amazonaws.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://storage.googleapis.com; style-src 'self' 'unsafe-inline'; img-src https://* data:; font-src 'self' data:
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers, Accept-Encoding
x-content-type-options: nosniff
feature-policy: geolocation 'none'; midi 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; fullscreen 'self'; payment 'none'
cf-cache-status: EXPIRED
last-modified: Mon, 30 Jan 2023 19:30:00 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wdv%2BTFcU1XXxAanBpwMn%2Bt8HK%2Fd09MlZWGwJ17GEumgpxceKUvpYZq0uzeWVIwK4t%2Bsg5r%2BXeCpXQtp7AWa%2FC8zn2o5AIKYrnNRJ%2BgxJzvYwzXGK7cMgf5nBnEvdpklR5hE%2Bww%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 791ed8c9087a24ea-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2