formarshtompchan.com/4/5084938/
139.45.197.238200 OK 2.9 kB URL HTTP/1.1 formarshtompchan.com/4/5084938/
IP 139.45.197.238:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5402)
Hash 0aad27fcb93cc866ebc4133975f99832
33bb8324e42608ee8e4ef795b9edb60360510df1
ec0468c90e9b59650fc2c00304742ae201ab2dc4766efadce9b9a8aa1339ca4a
Analyzer Verdict Alert quad9 Sinkholed
GET /4/5084938/ HTTP/1.1
Host: formarshtompchan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 03 Sep 2022 07:58:46 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 4fc308f8f8cc0dd2c4201e31f1f783f4
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=97f4abfc9feb4173bb9bfc3ed088823d; expires=Sun, 03 Sep 2023 07:58:46 GMT; path=/
oaidts=1662191926; expires=Sun, 03 Sep 2023 07:58:46 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 91dd975a7b17b2922dd23c0e49314e40
57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2
09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 03 Sep 2022 07:42:54 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: vQiATvCVkPXHmgAIyvKR0KzXNsclRme1D9lchf33jRHCt8GRWFSfXA==
Age: 953
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7276
Expires: Sat, 03 Sep 2022 10:00:03 GMT
Date: Sat, 03 Sep 2022 07:58:47 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sat, 03 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 2afd697fc5d0058ea30d6c4b939e714c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pH8odlC7rp9krlVR7GmmjbqmhBQZ3o2dJm2PdolSMbLPjjzm8OAiBQ==
age: 24210
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 41ea586f0e66dcd46f50ab3938543b12
d7a3d6a40066652fc85cdaab9e613246b6af4aab
60b133ec87e89ec28689b760f6ce265eee0e935dca93f42543885a05f8b19a79
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 07:58:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 18:25:21 GMT
Expires: Thu, 08 Sep 2022 18:25:20 GMT
Etag: "d7a3d6a40066652fc85cdaab9e613246b6af4aab"
Cache-Control: max-age=468992,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 744cf13a0b050b3d-OSL
formarshtompchan.com/favicon.ico
139.45.197.238204 No Content 0 B URL HTTP/1.1 formarshtompchan.com/favicon.ico
IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /favicon.ico HTTP/1.1
Host: formarshtompchan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://formarshtompchan.com/4/5084938/
Cookie: OAID=97f4abfc9feb4173bb9bfc3ed088823d; oaidts=1662191926
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 03 Sep 2022 07:58:47 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
my.rtmark.net/img.gif?f=merge&userId=97f4abfc9feb4173bb9bfc3ed088823d
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=97f4abfc9feb4173bb9bfc3ed088823d
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
GET /img.gif?f=merge&userId=97f4abfc9feb4173bb9bfc3ed088823d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://formarshtompchan.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=97f4abfc9feb4173bb9bfc3ed088823d; expires=Sun, 03 Sep 2023 07:58:47 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
formarshtompchan.com/?z=5084938&syncedCookie=true&rhd=false
139.45.197.238302 Found 0 B URL HTTP/1.1 formarshtompchan.com/?z=5084938&syncedCookie=true&rhd=false
IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
POST /?z=5084938&syncedCookie=true&rhd=false HTTP/1.1
Host: formarshtompchan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 434
Origin: http://formarshtompchan.com
Connection: keep-alive
Referer: http://formarshtompchan.com/afu.php?zoneid=5084938&var=5084938&rid=VUu1AGkgg4vvaREMoZG78A%3D%3D&rhd=false
Cookie: OAID=97f4abfc9feb4173bb9bfc3ed088823d; oaidts=1662191926
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx
Date: Sat, 03 Sep 2022 07:58:47 GMT
Content-Length: 0
Connection: keep-alive
X-Trace-Id: e31bfcfbd595aecd2f46165acce1a3ed
Link: <https://takemoneysurvey24.top>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Referrer-Policy: no-referrer
Location: https://takemoneysurvey24.top/finance-survey.html?offer_id=112025&z=5084938&s=589838296562278401&b=13412327&campaignid=14083&var=&ymid=589838296562278401&var_3={var_3}&testinapp=4816639&rdk=rk3
Access-Control-Allow-Origin: http://formarshtompchan.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=97f4abfc9feb4173bb9bfc3ed088823d; expires=Sun, 03 Sep 2023 07:58:47 GMT; path=/
oaidts=1662191926; expires=Sun, 03 Sep 2023 07:58:47 GMT; path=/
syncedCookie=true; expires=Sat, 10 Sep 2022 07:58:47 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4d5dac5351765358904ce1165cedbfec
fcedbba07d1ca8d919e8070bbd64d1cc00bffc0b
c08d11444c525d82476ad0c1adb1d2cd750a306a0ad25228cb75e8791abeefac
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C08D11444C525D82476AD0C1ADB1D2CD750A306A0AD25228CB75E8791ABEEFAC"
Last-Modified: Thu, 01 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9861
Expires: Sat, 03 Sep 2022 10:43:08 GMT
Date: Sat, 03 Sep 2022 07:58:47 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 345 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4d5dac5351765358904ce1165cedbfec
fcedbba07d1ca8d919e8070bbd64d1cc00bffc0b
c08d11444c525d82476ad0c1adb1d2cd750a306a0ad25228cb75e8791abeefac
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "C08D11444C525D82476AD0C1ADB1D2CD750A306A0AD25228CB75E8791ABEEFAC"
Last-Modified: Thu, 01 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9861
Expires: Sat, 03 Sep 2022 10:43:08 GMT
Date: Sat, 03 Sep 2022 07:58:47 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 03 Sep 2022 07:38:16 GMT
Cache-Control: max-age=3600
Expires: Sat, 03 Sep 2022 08:35:23 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 dac7cf040932e0c072eeed10afdd7b3e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _i_11ztbcGFel0ztBrgkvIluUmQ5DtuDB7W7Jrm8JZfYnSo0-lfEgg==
Age: 1231
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6255
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Sep 2022 07:58:48 GMT
Last-Modified: Sat, 03 Sep 2022 06:14:33 GMT
Server: ECS (ska/F716)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 41ea586f0e66dcd46f50ab3938543b12
d7a3d6a40066652fc85cdaab9e613246b6af4aab
60b133ec87e89ec28689b760f6ce265eee0e935dca93f42543885a05f8b19a79
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 07:58:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Sep 2022 18:25:21 GMT
Expires: Thu, 08 Sep 2022 18:25:20 GMT
Etag: "d7a3d6a40066652fc85cdaab9e613246b6af4aab"
Cache-Control: max-age=468991,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 744cf13fc8ce0b3d-OSL
push.services.mozilla.com/
44.237.51.86101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.237.51.86:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: f9sRs/0oCBtUONKjngzFOg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: tW9OiP9/wbPUWIJWhUuT5fRCsYk=
my.rtmark.net/gid.js
139.45.195.8200 OK 65 B IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 9680de9c3a01bbc2b9d9842a67b56ff7
ffa71288cf1609efd503e2f7a47745123018d203
2f2c3ccf4e6bfd4f9e649ab51257ba952ab54cf270cb3ee96c51faa088460710
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:48 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=531edc058e40471d884612d802437c32; expires=Sun, 03 Sep 2023 07:58:48 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 133cbc875b0226ddc112c0ea93b8abfd
f14c87cd39b073a6a47e126af58443ea0f9894bb
176152e7adc4c0fbecafb52e45b801696a3e20bdd48f137b9c6739ddcbf7f5fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "176152E7ADC4C0FBECAFB52E45B801696A3E20BDD48F137B9C6739DDCBF7F5FC"
Last-Modified: Fri, 02 Sep 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17722
Expires: Sat, 03 Sep 2022 12:54:10 GMT
Date: Sat, 03 Sep 2022 07:58:48 GMT
Connection: keep-alive
takemoneysurvey24.top/js/survey.js?v=9
172.67.206.149200 OK 99 kB URL HTTP/2 takemoneysurvey24.top/js/survey.js?v=9
IP 172.67.206.149:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9154f4e95f33c6b2a9e0e12589ed3aa8
941e58012b0f7cae6faf7c77853dab4cca8d2bc5
19b0275f8a71de82ce92c25a24d29d91208b76f0424b8a662faf9bc423f6ce2d
Analyzer Verdict Alert fortinet Phishing
GET /js/survey.js?v=9 HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=301606
etag: W/"6311edec-49a26"
last-modified: Fri, 02 Sep 2022 11:50:04 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 6739
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ns9ZAe5XNZxLRfgrJYzrVUIzdls1hpZgFUsA9FSqYLCHPiHtZKl4jWJNp6QqLEgon30FYaiTvpvXFjSh3Hc6N1unODPbXdhzsdyFC6LMGoIhZNfB6OXwJ5wBDMfLEb%2BbUDBgrWCGLzc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f3bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ugyplysh.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=takemoneysurvey24.top&var=5084938&ymid=&var_3=589838296562278401&dsig=&action=prerequest
139.45.197.253200 OK 0 B URL HTTP/2 ugyplysh.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=takemoneysurvey24.top&var=5084938&ymid=&var_3=589838296562278401&dsig=&action=prerequest
IP 139.45.197.253:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4842423&is_mobile=false&domain=takemoneysurvey24.top&var=5084938&ymid=&var_3=589838296562278401&dsig=&action=prerequest HTTP/1.1
Host: ugyplysh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:46 GMT
content-length: 0
x-trace-id: d14d526914456c19b9360d6bbb596146
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=&zoneId=4842423&checkDuplicate=true&ymid=&var=5084938
139.45.195.8200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=&zoneId=4842423&checkDuplicate=true&ymid=&var=5084938
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 9680de9c3a01bbc2b9d9842a67b56ff7
ffa71288cf1609efd503e2f7a47745123018d203
2f2c3ccf4e6bfd4f9e649ab51257ba952ab54cf270cb3ee96c51faa088460710
GET /gid.js?pub=0&userId=&zoneId=4842423&checkDuplicate=true&ymid=&var=5084938 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Cookie: ID=531edc058e40471d884612d802437c32
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:48 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=531edc058e40471d884612d802437c32; expires=Sun, 03 Sep 2023 07:58:48 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash 3e1ec6a228e70d1a0372d56076e5e924
ac0b1cacde5146b835e0d8f978dfcba7c3c7f4bd
6abec5c00996074bc8344248eb29861d6e5911ff2a3b2a98c67660a50db166f7
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 07:58:48 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Wed, 07 Sep 2022 05:42:11 GMT
ETag: "ac0b1cacde5146b835e0d8f978dfcba7c3c7f4bd"
Last-Modified: Sat, 03 Sep 2022 05:42:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 851
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 744cf141be7ab506-OSL
ugyplysh.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=takemoneysurvey24.top&var=5084938&ymid=&var_3=589838296562278401&dsig=&action=settings
139.45.197.253200 OK 735 B URL HTTP/2 ugyplysh.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=takemoneysurvey24.top&var=5084938&ymid=&var_3=589838296562278401&dsig=&action=settings
IP 139.45.197.253:0
File type JSON data\012- , ASCII text, with very long lines (734)
Hash fc4ddf61d518aa87321e6a6824d80480
af0c64828761243c64742002cfbbfd3f185c273e
5b19757c5dfef6d118709c4eca1346154102e3729742c0a17c6b3dedcabf2ce5
GET /zone?&pub=0&zone_id=4842423&is_mobile=false&domain=takemoneysurvey24.top&var=5084938&ymid=&var_3=589838296562278401&dsig=&action=settings HTTP/1.1
Host: ugyplysh.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:46 GMT
content-type: application/json; charset=utf-8
content-length: 735
x-trace-id: e6a438df613c2f2c6b9619136d5cf524
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 868bc78efbc0af61d8e5b056a3fe98f0
b91653078e9dfd2cc002c4a86a475185c5c87a61
55e3ccfeccfa143a28d3161e40d03c19c9e9f7f664ae0af2f615213d442723fc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "55E3CCFECCFA143A28D3161E40D03C19C9E9F7F664AE0AF2F615213D442723FC"
Last-Modified: Fri, 02 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=766
Expires: Sat, 03 Sep 2022 08:11:34 GMT
Date: Sat, 03 Sep 2022 07:58:48 GMT
Connection: keep-alive
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash bc096b80ae36ac8c43b00d12118032e7
9c66df9558a27f02410c007c184457aef544b068
72ed7d1bf9f8b3f4d1569d29b0ed46b9a31afd0d2a5e3dcc8c2570cb33d13b12
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 03 Sep 2022 07:58:48 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 02 Sep 2022 13:33:18 GMT
Expires: Fri, 09 Sep 2022 13:33:17 GMT
Etag: "9c66df9558a27f02410c007c184457aef544b068"
Cache-Control: max-age=537868,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 744cf141aad90b3d-OSL
mc.yandex.ru/metrika/tag.js
93.158.134.119200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 93.158.134.119:0
File type JSON data\012- , Unicode text, UTF-8 text
Hash 39589932a119a95bb73d2d55ec024df6
b8b87d98e0b7ff6c7d6892d68a4a6ebea38ac200
129e786eefb9b73e40a94e3a58a1f1409567face7d4ed72da34e7af3a2cdbb12
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 71985
date: Sat, 03 Sep 2022 07:58:48 GMT
access-control-allow-origin: *
etag: "6312122a-11931"
expires: Sat, 03 Sep 2022 08:58:48 GMT
last-modified: Fri, 02 Sep 2022 17:24:42 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: *
etag: "6312122a-2b"
expires: Sat, 03 Sep 2022 08:58:49 GMT
accept-ranges: bytes
last-modified: Fri, 02 Sep 2022 17:24:42 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
93.158.134.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash defdccc63b7959088a637dab10011c5f
cb75cc635268b1c7482360f9eb41ae17f23e7c20
40146ebd6575ce8d3e0bf42052130a29673cfc7c18392e12a17982ef476f8e45
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Sat, 03 Sep 2022 07:58:49 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonAdexCall&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A595712498%3Arqn%3A2%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1001%2C1001%2C0%2C%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonAdexCall&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A595712498%3Arqn%3A2%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1001%2C1001%2C0%2C%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonAdexCall&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A595712498%3Arqn%3A2%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1001%2C1001%2C0%2C%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afp%3A211%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075846%3Aet%3A1662191927%3Ac%3A1%3Arn%3A473761970%3Arqn%3A1%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Ans%3A1662191925853%3Ads%3A0%2C0%2C36%2C1%2C%2C0%2C%2C116%2C2%2C%2C%2C%2C274%3Awv%3A2%3Aco%3A0%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
set-cookie: yandexuid=9383615011662191929; Expires=Sun, 03-Sep-2023 07:58:49 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=9383615011662191929; Expires=Sun, 03-Sep-2023 07:58:49 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=2337857211662191929; Path=/; SameSite=None; Secure
i=HLz/y5I1+KsCEVU2b/wp5Vd/UK+q1lohGDecKTehV27g8EWnExZoVUvYjv5kRqopetdNfgE7JJ+aIgjQoHT93WBq+1A=; Expires=Tue, 31-Aug-2032 07:58:45 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1693727929.yrts.1662191929#1693727929.yrtsi.1662191929; Expires=Sun, 03-Sep-2023 07:58:49 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonSurveyStart&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A652419316%3Arqn%3A3%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonSurveyStart&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A652419316%3Arqn%3A3%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonSurveyStart&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A652419316%3Arqn%3A3%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 81
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonStepChange&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A636755023%3Arqn%3A5%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonStepChange&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A636755023%3Arqn%3A5%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonStepChange&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A636755023%3Arqn%3A5%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonAdexLoad&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A955462681%3Arqn%3A6%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonAdexLoad&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A955462681%3Arqn%3A6%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonAdexLoad&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A955462681%3Arqn%3A6%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A276812276%3Arqn%3A8%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A276812276%3Arqn%3A8%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A276812276%3Arqn%3A8%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A862761982%3Arqn%3A9%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A862761982%3Arqn%3A9%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A862761982%3Arqn%3A9%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A91270082%3Arqn%3A7%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A91270082%3Arqn%3A7%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Ftakemoneysurvey24.top%2FonNotificationPermission&page-ref=https%3A%2F%2Ftakemoneysurvey24.top%2Ffinance-survey.html%3Foffer_id%3D112025%26z%3D5084938%26s%3D589838296562278401%26b%3D13412327%26campaignid%3D14083%26var%3D%26ymid%3D589838296562278401%26var_3%3D%257Bvar_3%257D%26testinapp%3D4816639%26rdk%3Drk3%26utm_medium%3D5084938%26utm_source%3Dzd_14083%26utm_term%3D13412327%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1662191929_b605cef045522f6dbe519690a2c646d684ddffc07462b57229df1977ca446ace&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3A2ofv6mafcjh9urjbdp7e2g%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A882%3Acn%3A1%3Adp%3A0%3Als%3A154859926369%3Ahid%3A485114070%3Az%3A0%3Ai%3A20220903075847%3Aet%3A1662191927%3Ac%3A1%3Arn%3A91270082%3Arqn%3A7%3Au%3A1662191927205674223%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Aeu%3A1%3Ans%3A1662191925853%3Awv%3A2%3Aco%3A0%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1662191927%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 03 Sep 2022 07:58:49 GMT
access-control-allow-origin: https://takemoneysurvey24.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 03-Sep-2022 07:58:49 GMT
last-modified: Sat, 03-Sep-2022 07:58:49 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15208
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:58:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15208
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:58:49 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash b15f3f14bd92b7a544ec2347e6810c7b
dd55fd8396d796082edabb5ab6e2d7fb3b51b731
87c27c4b0288f31faa405ba5247767d1f299938551bd284212ee487dbb0deb63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15208
Expires: Sat, 03 Sep 2022 12:12:17 GMT
Date: Sat, 03 Sep 2022 07:58:49 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
34.120.237.76200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c199f7fc2a2857dec134bfdb2673e28c
af3989072b658e2de119d006ae4ca1703468913d
e57411ba0221f6ffa7baf7c374ec790959a66d6a683fad40883ef01cf67e35c3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc55d0c73-4085-42ac-acb4-1ae9b2ffb393.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: da379546-9525-4e13-b9f0-a6446839df66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eNeG7kIAMF4-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63127722-37399f67565b06e7111095cd;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5SORUPJgJ_gKKs4hSa4EzCCQA6B1dmyO1EC-gCBvFKl2R2hV0mYTeA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:39:01 GMT
age: 33588
etag: "af3989072b658e2de119d006ae4ca1703468913d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dce7ca4-6ed1-4f00-8943-1ea59bc2cfd0.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dce7ca4-6ed1-4f00-8943-1ea59bc2cfd0.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 940d722cca434f3267ad6a1567b92e7b
8f8d5827588201a2b6aa883cbf812b0db2318df2
33c16b50e7c317df2b91def5625e8e39c8c2ecc75054ee40f82d4b22c80eb831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7dce7ca4-6ed1-4f00-8943-1ea59bc2cfd0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11776
x-amzn-requestid: 59dcda55-4c16-4842-828d-2588c43178c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XqdN-FzkIAMFy4w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630da8bf-37b930cb3e54dfa21883ead4;Sampled=0
x-amzn-remapped-date: Tue, 30 Aug 2022 06:05:51 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: eVOxXB-DBdvXLiSeG8b7tDD2oLU6x_F5EUSh-JjIW7SQJ1j9kOA6hg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:00:51 GMT
age: 35878
etag: "8f8d5827588201a2b6aa883cbf812b0db2318df2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F284d1308-98de-4954-a408-a2c074e0e7ea.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F284d1308-98de-4954-a408-a2c074e0e7ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 945f8c7bc247f564fc18e434049b8eaa
a74869b1d9551896ba6f911d167e192b2d9fd45e
143e84c6bbba21b868d2a443a365129e625614caa8f6eb7247cf971ce24417af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F284d1308-98de-4954-a408-a2c074e0e7ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12853
x-amzn-requestid: 2faea4f9-2bc2-4f09-98ff-753202d8a4e2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eMHHfpIAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312771a-00ba3cea36308cea4a092141;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 9qJg8ABexAQhpVPxIuH1gRIE9m62F5jPWWnaiMcF0RD9N-Wt30JTEw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:00:18 GMT
age: 35911
etag: "a74869b1d9551896ba6f911d167e192b2d9fd45e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1a25fee-f3d6-472f-81bc-e6c0a5fb3126.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1a25fee-f3d6-472f-81bc-e6c0a5fb3126.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 68ab3b487c83fa2b50f774f1ed7e2e00
761c970aa19a87625a60a80f74dc9ae9d8c54ab0
4c483c7ad3b7f20a4566daf558fbd308158068accbbaca38089da192c2bc722c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb1a25fee-f3d6-472f-81bc-e6c0a5fb3126.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6629
x-amzn-requestid: 2542bbcd-b962-4397-9c6a-359fa9b33b4d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X0mhjF06oAMF62Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6311b7a3-281acf5f7c4982e26c723e42;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 07:58:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ygiWF4CCLws5zXLxKz79hEJ5eZEFIUsg41lhMvr9NeWjaFLLTX2OeQ==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:00:54 GMT
age: 35875
etag: "761c970aa19a87625a60a80f74dc9ae9d8c54ab0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9669117-bdb7-4eca-9f0c-900e888a9a98.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9669117-bdb7-4eca-9f0c-900e888a9a98.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9ae49d397bc8300ce0eceda8175a3ad
087b7d14d84ebb179126c9dcd8964d22f24f30ab
b9daa2fc390a97a4bd622dbdec7fe0fff7e6527ffb844a46b9b87b2bd6e0f006
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe9669117-bdb7-4eca-9f0c-900e888a9a98.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13241
x-amzn-requestid: 80083a05-9884-48f8-983b-d4132d7c8a0c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eMHFgPIAMF9qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312771a-16fd2f06541cb4bc027f153f;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: zugAT8FgWA5gShTMABbCTZbZzaCXxM6du0zskoXn-LtzDNb5j4ByeA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:18:36 GMT
age: 34813
etag: "087b7d14d84ebb179126c9dcd8964d22f24f30ab"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 23b580e2b673257d24b9c2e80c4c48ce
f3a3d835a37f9b23e7458f9b7bc721bc415b61cc
c0e3559fde3dd08cdbd360f39dddcc98dd7c1b3aebd0861cc07105872a116d11
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff7d7b349-4711-4e66-bc42-888934e385a2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7501
x-amzn-requestid: bf297fc4-9164-45ee-bfab-06761a52e3ba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X2eMJEP1IAMFdpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312771a-6b3e6416133d67a83d8a1469;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 21:35:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: datd5eYK6nOAUdEpy_y4gcqsVmCqjP4qhzTnlJ9pSrquoYk2PPugTA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Sep 2022 22:02:34 GMT
age: 35775
etag: "f3a3d835a37f9b23e7458f9b7bc721bc415b61cc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
takemoneysurvey24.top/js/config.js?v=2
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/js/config.js?v=2
IP 172.67.206.149:0
Analyzer Verdict Alert fortinet Phishing
GET /js/config.js?v=2 HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6311edeb-11a68"
last-modified: Fri, 02 Sep 2022 11:50:03 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 3097
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zhBmfAKhjCFcriTpuWySO7mywdktTggK%2FH8hVRaATZA4qeF0KWdDDzeRj1MoBDrTmX4x%2FPprDvQujco1tPo04%2F0UAsGhFqRxroEOWy3pgTTPUIfDe6LcMZxRjyzDeoCC4PvIzDdn%2BaY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f2bb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/css/style.css?v=1
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/css/style.css?v=1
IP 172.67.206.149:0
GET /css/style.css?v=1 HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=40801
etag: W/"6311eded-9f61"
last-modified: Fri, 02 Sep 2022 11:50:05 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 6739
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B9FMwvpWH5UZvDOlKvazQXGLQSv06J0G3U%2FUDoQwoPsv5hZ61BwoEZWGIjrEbCp%2B%2FU6QgJkIhmGcasAFbc1Piqc7qWr%2FFcSpgT7bS8PW7XpGmaciPJZ8wlWwghMiKijEh1lAP1YkWcU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f2eb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=4292518;4326645;5128285;4949467&var=5084938&uid=531edc058e40471d884612d802437c32
139.45.197.237200 OK 0 B URL HTTP/2 itcleffaom.com/rotate?zz=4292518;4326645;5128285;4949467&var=5084938&uid=531edc058e40471d884612d802437c32
IP 139.45.197.237:0
GET /rotate?zz=4292518;4326645;5128285;4949467&var=5084938&uid=531edc058e40471d884612d802437c32 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://takemoneysurvey24.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Sep 2022 07:58:48 GMT
content-type: application/javascript
x-trace-id: 81837c4c6870445dec1961c8354754a2
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://takemoneysurvey24.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=531edc058e40471d884612d802437c32; expires=Sun, 03 Sep 2023 07:58:48 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
takemoneysurvey24.top/css/survey.css
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/css/survey.css
IP 172.67.206.149:0
GET /css/survey.css HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19835
etag: W/"6311eded-4d7b"
last-modified: Fri, 02 Sep 2022 11:50:05 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 3097
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NIc1jOKRJiWq%2Bl1pefKNZViwoElcY5tn1jo3%2BZDBsFtqhuqIbm4xKMzIRyEu8WsNvEi3HoaW6%2FVePdUFusMQXgoSRErQP7EYizrz7Dkv9Gyl%2BF44BgEGDRQINowePMPeUHNYz12NKxo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f2db51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/js/data/_global-config-sd.js?v=2
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/js/data/_global-config-sd.js?v=2
IP 172.67.206.149:0
GET /js/data/_global-config-sd.js?v=2 HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=643
etag: W/"6311edec-283"
last-modified: Fri, 02 Sep 2022 11:50:04 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 3097
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QsMJAZVts%2FCS7ALZkro7lf2PtX8cpRjaoqBgi7ZQkoUYKnH9u9FBIxwShLXtJemuAZ7AKdzHE82h%2Bj%2BwHcNC%2FaAUtIaAIFfs0A7W83%2BTnDExvkz6N%2FmRblDpayVGh9NGza7Rd6H0gnE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 744cf13d2f24b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/js/data/rtc.js?v=1
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/js/data/rtc.js?v=1
IP 172.67.206.149:0
Analyzer Verdict Alert fortinet Phishing
GET /js/data/rtc.js?v=1 HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=15077
etag: W/"6311edec-3ae5"
last-modified: Fri, 02 Sep 2022 11:50:04 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 6739
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YjdC5lVrD2hFC2VpTSxIHu0HwaemMfbTaGEHX9Xrl%2Furuj2fknQvTHL8hbASmqjcSk8ZzddQaG7fuOI%2BEaYmjDVCt0k1bg6X%2BBOEG20jJibZwalDRcui2bycyxE9dsTTmrnwhzjDzkE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f25b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/img/icon-survey.svg
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/img/icon-survey.svg
IP 172.67.206.149:0
Analyzer Verdict Alert fortinet Phishing
GET /img/icon-survey.svg HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: image/svg+xml
last-modified: Fri, 02 Sep 2022 11:50:05 GMT
etag: W/"6311eded-c26"
cache-control: max-age=1800
cf-cache-status: HIT
age: 1638
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uUT9NqE6FsyTy5wIHg8AEjqmUCOP3bZrIfy53TyWvIv7TzV525dOaGt63nLlkjMz5WFOCthPqDdkaDXXa2fx4RB6XBggW5DvYuCUM6GbPiOfixvnwdxRiU9kBZ%2BuEqx5vWcSthoWbic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 744cf13d2f34b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/js/binom-pixel.js
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/js/binom-pixel.js
IP 172.67.206.149:0
Analyzer Verdict Alert fortinet Phishing
GET /js/binom-pixel.js HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6311edec-4a3"
last-modified: Fri, 02 Sep 2022 11:50:04 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 1638
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=new7LWGPUhoHLdkLBIgho0f9smukGhgWxODTrR0MAuEw6I9QBy7Hio14NXqzaaPHgdyD5prqOqIRaf2v9%2FjZ%2Bd3YZ6DRU6LxUycjcIFdonlv6BioTIEVAL3CQbvXc%2FgjVRQBqcsyS70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f40b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/js/survey-site.js
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/js/survey-site.js
IP 172.67.206.149:0
Analyzer Verdict Alert fortinet Phishing
GET /js/survey-site.js HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6311edec-edd"
last-modified: Fri, 02 Sep 2022 11:50:04 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 3097
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2tzj43mgdxXXicGiK9Rej6%2Fr74ccUjX3J236%2Bo6g0jOc8oMJqaChFWFvprPiBdL2zzBn5MoSzoZoo1uApXLopK4M5kQVS0Q6R0wySm5vAzWMVRR3kZ1v8QEOUJMBr64tJZ1kSxE4wYA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13d2f36b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
172.67.160.61200 OK 0 B URL HTTP/2 cdntechone.com/stattag.js
IP 172.67.160.61:0
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:48 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:17:49 GMT
etag: W/"62ebe31d-a8fa"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 4500
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ySz5DP%2B%2Fn8R%2Brw5pllDgkzfll0limdOuyhljVZLEgAxNGcNRoNAc4wKFnC%2F4grq7hD1e%2FCypBl4CDge1xZRSOas%2F7MEWNhwB242cHTZqltWYzxDlYAChxAmVMuS8UjOZFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 744cf13fccf8b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
takemoneysurvey24.top/finance-survey.html?offer_id=112025&z=5084938&s=589838296562278401&b=13412327&campaignid=14083&var=&ymid=589838296562278401&var_3={var_3}&testinapp=4816639&rdk=rk3
172.67.206.149200 OK 0 B URL HTTP/2 takemoneysurvey24.top/finance-survey.html?offer_id=112025&z=5084938&s=589838296562278401&b=13412327&campaignid=14083&var=&ymid=589838296562278401&var_3={var_3}&testinapp=4816639&rdk=rk3
IP 172.67.206.149:0
GET /finance-survey.html?offer_id=112025&z=5084938&s=589838296562278401&b=13412327&campaignid=14083&var=&ymid=589838296562278401&var_3={var_3}&testinapp=4816639&rdk=rk3 HTTP/1.1
Host: takemoneysurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Sep 2022 07:58:47 GMT
content-type: text/html
last-modified: Fri, 02 Sep 2022 11:50:03 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XjQY%2FnDOOPY%2F02iKTQOSDg809Ae5WQRw%2BCXoSp88GH7LmewATcVpkdAE07pnxmERkoI9D98ptpkmQEh4rkzURZfcanzt2XpGbZ5ri5JrlFhWJ8f0onnO411R8IpsatiNcaFDnUPU4jA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 744cf13bed98b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2