surveygett.com/link?z=5942381&var=&ymid=8KW64nSBvBM2n3MYsjdwsb&ymid=8KW64nSBvBM2n3MYsjdwsb
139.45.196.64302 Found 0 B URL User Request GET HTTP/2 surveygett.com/link?z=5942381&var=&ymid=8KW64nSBvBM2n3MYsjdwsb&ymid=8KW64nSBvBM2n3MYsjdwsb
IP 139.45.196.64:443
Certificate IssuerLet's Encrypt
Subjectsurveygett.com
FingerprintBC:D1:31:EA:9F:E6:E5:A7:E4:29:0C:EE:62:2E:75:9E:D2:D9:6C:1B
ValidityWed, 05 Jul 2023 05:20:42 GMT - Tue, 03 Oct 2023 05:20:41 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /link?z=5942381&var=&ymid=8KW64nSBvBM2n3MYsjdwsb&ymid=8KW64nSBvBM2n3MYsjdwsb HTTP/1.1
Host: surveygett.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 20 Sep 2023 07:06:53 GMT
content-length: 0
location: https://absrdmn.com/link?z=3956710&var=5942381
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 3709ae521800d5d75c4b0f6655d68230
link: <https://absrdmn.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=2deda551a99b4f8c9c33fd04929364b0; expires=Thu, 19 Sep 2024 07:06:53 GMT
oaidts=1695193613; expires=Thu, 19 Sep 2024 07:06:53 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
absrdmn.com/link?z=3956710&var=5942381
139.45.196.64302 Found 0 B URL User Request GET HTTP/2 absrdmn.com/link?z=3956710&var=5942381
IP 139.45.196.64:443
Certificate IssuerLet's Encrypt
Subjectabsrdmn.com
FingerprintC9:47:39:E7:92:4B:84:7B:D1:F3:E9:4A:7E:9D:2D:AC:D5:F8:5B:A1
ValidityWed, 09 Aug 2023 11:20:15 GMT - Tue, 07 Nov 2023 11:20:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /link?z=3956710&var=5942381 HTTP/1.1
Host: absrdmn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Wed, 20 Sep 2023 07:06:53 GMT
content-length: 0
location: https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: b7616109f73d3fc28ace6e6e91df1419
link: <https://pauzeeth.top>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=8aca3846a5dd4a9b95b2ff6c5352a527; expires=Thu, 19 Sep 2024 07:06:53 GMT
oaidts=1695193613; expires=Thu, 19 Sep 2024 07:06:53 GMT
OXCCLK=4105106.1; expires=Thu, 19 Sep 2024 07:06:53 GMT
allcnt=1; expires=Thu, 19 Sep 2024 07:06:53 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
pauzeeth.top/css/_core-survey.3c68fa3a.css
188.114.96.1200 OK 39 B URL GET HTTP/3 pauzeeth.top/css/_core-survey.3c68fa3a.css
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with no line terminators
Hash 8dedc9c85547dbfd18d8d2c35016e8c4
09caac80aab26aa3cb9c3db1cc8587da978819bb
156a7eb2ee3221c33626185f4fc8bd5c047513c7f01945f1461692fadd87f95b
GET /css/_core-survey.3c68fa3a.css HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: text/css
content-length: 39
cf-bgj: minify
cf-polished: origSize=40
etag: "650996d7-28"
last-modified: Tue, 19 Sep 2023 12:40:55 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DMoq5LlPxOTjXI6Hil7I8k0m7%2BVxDqGlF7lxLFgpZVpaQHD8QXU7VoJ7viyZxmt5nATYh809GFId556TrSyUaEuWJl5Bk9yu6YUKntNdVW%2FsPWcAOja%2BA%2FUAI3HWxnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea200b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
188.114.96.1200 OK 2.7 kB URL User Request GET HTTP/2 pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
IP 188.114.96.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5561), with no line terminators
Hash af08cecdccf06f60bd62227f18108b25
98ed14083afc3bc5bf1a5b062481d02cc79d18dd
25966e717804a47c955df7213c45783703592833de47b7fb3eaede5060d243d6
GET /survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544 HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: text/html
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BkbiB7S1Zk4MP2Scd3E3R%2FaoFvByLcAsqib4WL3u5Tq1ZkaCEIl7ueCJ2nyCA3ZVACdS1khvmJM5nxJuxM27w5EIHP2qVjYlix0bc%2FzOwSldUVQVdknbw6tz2MIySk0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a79687856bd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pauzeeth.top/js/_global-config-sd.ca890aa7.js
188.114.96.1200 OK 1.0 kB URL GET HTTP/3 pauzeeth.top/js/_global-config-sd.ca890aa7.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (1864), with no line terminators
Hash a82d6db31bbc3fe84f393353c1b02a38
ec96f539ccf75ffed179bbfcef236d95b0577492
872d72453acb1662ee9cd3c46a6774491946fed48a53786e415745374809ef06
GET /js/_global-config-sd.ca890aa7.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d6-748"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7anlfh2vnVTED%2BP6Ss8j%2BDOgaDJohbkY%2BT%2FGpvBeb%2BosGjEC4LGtRN0Zycnuu1Uc%2BUJJMwgO0xsfKqDVvXZfktZvA1YPXwEJZO0dbNLTZ3NZEebp8tgsyp3xJkECTdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda060b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash ae50dd0b146eaba47d6875ee64e98171
12f1c80bcc2972dbb73c578b8169b7441ed10c29
d070845e05c34fa765452de8e6b6cab85a557b35daeabc235fa46adc4f942307
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pauzeeth.top/js/v-redux-toolkit.esm.js.86d657a2.js
188.114.96.1200 OK 4.8 kB URL GET HTTP/3 pauzeeth.top/js/v-redux-toolkit.esm.js.86d657a2.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (11315), with no line terminators
Hash a4fe018340af9bd999c47690bff0c0a3
5c64261d732ab851676fb5480733bc7a3a9f8a9d
26608974055030ac39ff50090c78dd6d4ab237908716255f07c064a0ef4ab6d2
GET /js/v-redux-toolkit.esm.js.86d657a2.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-2c33"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l2gu8rvqVpHSE7rcFssGxNsFQN1beTxEiLY6LwZTpZ50awOuuIQ1Hcv4mxamWgiOwDji6SrRN3YuwwaOFufuYRRWBwGn1GuVhilG7AXZowUsaOQRe0fSyuymhQDdn7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda170b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/v-index.mjs.c6b8f796.js
188.114.96.1200 OK 8.0 kB URL GET HTTP/3 pauzeeth.top/js/v-index.mjs.c6b8f796.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (35191), with no line terminators
Hash a7f1a1f90ba847a9df1cf8f820bb0df2
4e7e1313164829dcfdf6da6f817f40244e02ffda
b661fc88bf689df1b62710ede388dd6a28f5aafa7a4537d7768a490dc47bb271
GET /js/v-index.mjs.c6b8f796.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d6-8977"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y%2BZfAUFydQ2%2BtxRVyjeqCoLAI%2BhK5Yvj3IOOQ8jYTvzZoJvmI2EjuiUPkXr829kh3EkQIfm2UWDXoWcsSk%2BNt5GqzG4F3FqmJ3K%2BfbGCUbZvCxAzUZynznA7i5Lg4sQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea1c0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-do
139.45.197.248200 OK 0 B IP 139.45.197.248:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-length: 0
access-control-allow-origin: https://pauzeeth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 150
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 79645cbcb399bed824fef3e60d211e43
access-control-allow-origin: https://pauzeeth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 64974e31d5d11a422a43482c1cc264fe
29df1e5938da864a59478f5aaa0b25c197a5b097
1c96fb2945985f7073b63e5249b8557af232bc52229fa5a1230317c17b8736c4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dortmark.net/sync-do
139.45.197.248200 OK 179 B IP 139.45.197.248:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 04f741b2dd2533443bb9370b3a7b41b7
access-control-allow-origin: https://pauzeeth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pauzeeth.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=3956710&var_3=728257042697167786&var_4=null&ymid=5942381&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
188.114.96.1200 OK 11 kB URL GET HTTP/3 pauzeeth.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=3956710&var_3=728257042697167786&var_4=null&ymid=5942381&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (26946), with no line terminators
Hash c4c761125651e4efaebea8986cfa7d2c
576d06df4b5da15d218ee3ee081cc8a808369e07
5e7c10f10f6c51e3c356a601e33f8102d1ad17a9b24734542f691fceb73a6b9a
GET /pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=3956710&var_3=728257042697167786&var_4=null&ymid=5942381&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-6942"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G%2FZUO7JvDRJAnZTXd%2FwWOYVn%2BQk%2BheWi1o7OoirdRNrE73GSYNdKUkE6%2BkQGBgkiA9Sa6mwTgdOsBN64dcYYIyqpEoDof4qAxhfX4yW8sMWqwtzGTsELBcS%2BoSPP9kg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7e6c7d0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-14.webp
188.114.96.1200 OK 1.7 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-14.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
GET /img/comments/person-14.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1672
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6453
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MwhHmw54bBJhaIi9JeB2CXtdIyc36CVkqewz7PhXwTWN48JtlrGl7cQgk9tP4GFHa6VVMIesGo2IHCCLpxVMPAfrHuobo5JtY8%2F45z2VoFbD1e8cZb5on5c9PmraCd0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806d9b0b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-2.webp
188.114.96.1200 OK 1.1 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-2.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
GET /img/comments/person-2.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1104
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4XEqC12cuAYS80vZ5XwyNq8dpN3JwDsT%2BcwYLPZ71eN1YDB73W0IGUiYnqGoQkwbHpwQSZJMRja3RvK368uscI3npaG5LmHti042wS8kP04ddFEpwEDTMkxPWjnCvSY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806d9e0b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/icon-survey.svg
188.114.96.1200 OK 6.5 kB URL GET HTTP/3 pauzeeth.top/img/icon-survey.svg
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2674), with no line terminators
Hash 9a8ba19b913810bd358e5caf3a7c2a75
6eff5e84f2b82772bb6029088ed852a8161b3252
58b0a3aa24ef605d4b812bcf92cbaa2e7f78bd43f929ca6362bc259da610399a
GET /img/icon-survey.svg HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: image/svg+xml
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g79STwO%2Fmmu%2F1wOE2gqic%2FfKypNlVt3bWcB2pD4PSxll3HhY99ITBB2RTwLI4xXFGsTIQd3u0cko%2FjvZkHoUFo6PzPoCINIh9MHKqmcC0%2BrAM5dKeENbvQy649qMty0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea220b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdntechone.com/stattag.js
188.114.96.1200 OK 9.2 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1445
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=04xyf%2BcI0e9qZS66PQ7MmrfSHda%2BWSmOtPVfgqcn8IG5SN4ELZcORwgQhG%2FM7dBtusRZOBva2Q4LdfdaCgUSI6HxP68UdaXZVRVEyUQMA%2BMs9okCDC4DOymup7eFxy6UFg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80983a7ea89956b5-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pauzeeth.top/js/v-immer.esm.mjs.775845da.js
188.114.96.1200 OK 6.0 kB URL GET HTTP/3 pauzeeth.top/js/v-immer.esm.mjs.775845da.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (10497), with no line terminators
Hash a9b55caad0866134c730f46bb9ed3a6d
d9341ec11cd3e427871deeb1260e5b74dfbb44dc
c85b6ebe2e815c85c04f96491b0d74e99f31388d8a507bcd1593f2ccd303373e
GET /js/v-immer.esm.mjs.775845da.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-2901"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LZUJopOaNP4MBUiTv2oVu4BNAGu419HVAKdTKjgQVJV3xaDse0oHOTYAWj%2Fh3dXNAjRUfFH%2FYMGNsos3uGwjIyZzURbt17Dbd4LN8fkieebQWAFZJVtZGssi2sh1V0c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea1a0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/survey.9ba0d360.js
188.114.96.1200 OK 4.1 kB URL GET HTTP/3 pauzeeth.top/js/survey.9ba0d360.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (6056), with no line terminators
Hash bf970481c292d02f4d54a35a380e04d0
a7a4981ae88714d808592c7e0c6ba5e194a4afb3
0a01eed1c36b62c8442d96789b5b15f7dc607605ac901dc57250177b0b48c1ab
GET /js/survey.9ba0d360.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-17a8"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5BLUSMZG4K0y%2BaXl2GoB83nbmi9BO0D%2FGYfyR%2BT87flYeH8MFWZHPmaXuLltDfArYwRNjMDH53Q0XsEgNst9JYAj9ylKc65LxX3mnBYnLEWeZ%2B8iczG5SnTmtw6fJNA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea1f0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-3.webp
188.114.96.1200 OK 982 B URL GET HTTP/3 pauzeeth.top/img/comments/person-3.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
GET /img/comments/person-3.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 982
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RuHSjhQS35A%2B4p6UFbLJrWlFMgti74bYvWconll5WE3TZplx3BgMN0dQOZYDC0W0VBmnc7adCQ1W55jGYodkAzNgzcB43SjqvvCF8IPyOiHLSDMRUlQZEwnIjDy5OR4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a807da50b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-9.webp
188.114.96.1200 OK 1.7 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-9.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
GET /img/comments/person-9.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1654
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TneCeVTRWjgTSsprilkqXxe5CAASitcN%2B7TWqXoAaw3DkhNuxTJqKG8UidSK2rK%2BivRtfnPbTW8%2F4WICHsf4A6sBh68jshUM9ml3zZ6h3wF87MsEQsNVxVEp58Byda0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a807da60b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/config/dict/cookie-consent-1.json?v=10
188.114.96.1200 OK 4.3 kB URL GET HTTP/3 pauzeeth.top/js/config/dict/cookie-consent-1.json?v=10
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type JSON data\012- HTML document, Unicode text, UTF-8 text
Hash 4f1c632e971c4261f927ed0cf67bfdee
18c72b10719ca98b61b1f1f84e4b01f0ed8b3763
2bfa8e9b4326caea44f0d0c0345a31f34f19d47ae2e60fbc7c557df9ceffdca6
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/json
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rC9xRN%2Ba1fMI9UrD0%2Ft3vsguQ3cC0PrgL00VVVzrtW%2ButUbWgyUTum8KLVfSbnEMsO2hyn18tCU9GrAyrW%2F0r7c5AcBR9E8J7%2BPuXsczn0b5a1pr%2BjDxWmP8hHTv8Ac%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7d9bc80b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-10.webp
188.114.96.1200 OK 2.2 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-10.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332
GET /img/comments/person-10.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 2222
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZI0Viyfy4h5xhjnRUR%2BOiGHbdyVFy%2ByGdfnaHxFPyhX9pgCJfznUUUkGM1wi%2BsWi3KdJGo9KMMaoqH%2B0yAWvdAS6S6BZG%2FmMhw8hra8YR3MpCXl5y5WDCKERs8CKEzc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a807da80b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/v-react-dom.production.min.js.d40305c2.js
188.114.96.1200 OK 45 kB URL GET HTTP/3 pauzeeth.top/js/v-react-dom.production.min.js.d40305c2.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 3f5245acf0ca449450dbdbc1247ae6fc
0e46626d553bc183f671079605dac9816fbdff4e
a3e77eb0f29044ac881d27eb49082374bae2a0cb9407576bde0043cd70814cd5
GET /js/v-react-dom.production.min.js.d40305c2.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=129354
etag: W/"650996d6-1f94a"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Ls6xWDsBcz6oNQ7GRCnHdBqu%2BxzBxfi4kUi5gwNhmj%2BXKpJLBszm56l910FsgyuzQgaGUcX8k0K%2FX8QQ6O9qUtyilCEfoZ0n7fqIoQ9SR9Bx1RU0K1repFa85so7tE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea1d0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=pauzeeth.top&var=3956710&ymid=5942381&var_3=728257042697167786&var_4=null&dsig=&action=prerequest
139.45.197.250200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=pauzeeth.top&var=3956710&ymid=5942381&var_3=728257042697167786&var_4=null&dsig=&action=prerequest
IP 139.45.197.250:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint4C:A3:DB:F6:1D:A2:D6:78:AD:0C:8D:D6:4F:CC:11:8D:EF:D5:AB:B9
ValiditySat, 26 Aug 2023 05:13:11 GMT - Fri, 24 Nov 2023 05:13:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=6163203&is_mobile=false&domain=pauzeeth.top&var=3956710&ymid=5942381&var_3=728257042697167786&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-length: 0
x-trace-id: 23b08a61174164de2c3b7564d9dfa54a
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.14.101 471 B IP 104.18.14.101:0
Hash bf2ff9fe48c606169e16ece0c74a3137
6cbb7558a6cb9bef14f355adb55746db54e71cd5
ac8cc7415b293daa75aa9396ea2b2fb617c944a1259aa94443fb80f6626047f3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 20 Sep 2023 07:06:55 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 19 Sep 2023 15:22:13 GMT
Expires: Tue, 26 Sep 2023 15:22:12 GMT
Etag: "6cbb7558a6cb9bef14f355adb55746db54e71cd5"
Cache-Control: max-age=547676,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 80983a812b8c56c3-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
37.48.68.71200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 37.48.68.71:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1546
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 20 Sep 2023 07:06:55 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://pauzeeth.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 69
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3484b56c17304e99344ce1629b7a5fa6
access-control-allow-origin: https://pauzeeth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
142.250.74.99200 OK 186 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
IP 142.250.74.99:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type ASCII text, with very long lines (552)
Size 186 kB (185696 bytes)
Hash e2fe3524ee9bc3801e88f30301fde700
ecdb5bdcebbbaad69868ea78033be35ac9b20a58
a36746585bd5af117aff1cfeec39c2a810d6d9c601ca083d132786abf09d01b1
GET /recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185696
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 16:50:43 GMT
expires: Tue, 17 Sep 2024 16:50:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Sep 2023 18:47:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 137772
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 07:06:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 70
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:56 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 4ba0b6056a0eddf80023d1764bd181a3
access-control-allow-origin: https://pauzeeth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
139.45.195.8 43 B URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:07:09 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527; expires=Thu, 19 Sep 2024 07:07:09 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pauzeeth.top/scripts/prefetcher.js
188.114.96.1200 OK 11 kB URL GET HTTP/3 pauzeeth.top/scripts/prefetcher.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (10761), with no line terminators
Hash b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
GET /scripts/prefetcher.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d6-2a09"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6453
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P6d1zQZdULspK7EdcHN2XXyh8WE5i3C2qaVICBjwNqlRi7UtPeeFATryfrhNEdW2mIkEG1g%2Fv0OQdOrdellUXMD4c6c5YkKCNgJPIYhdROVgIYdB5PlPMLeo9VhhjVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7ceaf80b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/_prefetcher.d6d66ea5.js
188.114.96.1200 OK 2.4 kB URL GET HTTP/3 pauzeeth.top/js/_prefetcher.d6d66ea5.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (2484), with no line terminators
Hash d8081d6f211de7348b84bed51d3e7a38
560663a3284ecfbddb6c8f6e20d1e0ba01d7d835
035b1173e3f59b87a7157c4027d8fe8a616880d7b79788a6c4a98fd9b8b2e962
GET /js/_prefetcher.d6d66ea5.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-96e"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tAhu11x%2B%2BJAb3uNNnri%2B1dRZGhfYmanGGuvBsfTN0YDKDXJD5uzVcVZM4ipVNVfVM%2BlXNbWNszT7Lji%2B1r9KsFDzsgFRJQ%2Fjr7UshwOm6eDuqciJSRRIyjDnVCWbI2w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda070b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-4.webp
188.114.96.1200 OK 1.4 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-4.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
GET /img/comments/person-4.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1356
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BnnUh7yZjA35uUnSKuw25dc%2B6pD7TD%2FxKKFOOLVLVHT5NPMP6rxD%2BONF4UopmXxsMMxs8CNHCEaVnE2ytg8Vc65KOCuyv%2Br%2F1vA31hHCMGKu3d3M9kbNQMio8bItgLM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806d9f0b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/_rtc.5d12e065.js
188.114.96.1200 OK 11 kB URL GET HTTP/3 pauzeeth.top/js/_rtc.5d12e065.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash c6bd49904cc559c9bc68a03432ad510b
b89b3d9fc51068205d1af84136dd4f29591c23b8
d34dbd1f5646dad2b509951f30c0f475ed4ee59e40ced9825762c279619bc539
GET /js/_rtc.5d12e065.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-2bb5"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FvDu3geaM6fNlGY8LI6zub%2B39HVh%2B0ZjOjP9s966Yg%2B%2FnnuH0tPE7PaDb%2FOuSkVD4KQlUP1fwzmCd9t1jdCN4rjeq5EwCKnbjcPIgndFrywvl5trmKt48o3%2FFdOweMA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda080b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/v-index.js.36b291ca.js
188.114.96.1200 OK 41 kB URL GET HTTP/3 pauzeeth.top/js/v-index.js.36b291ca.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (40879), with no line terminators
Hash 1946258710afc5f07ad8dc1ac8546efb
b5b0e50a053c368f3ae65fddf9fe072e4ceefab4
c7cff67c9f67a2d76980471f7e48a8ae8725757c21c0546a26ad97100b554f8f
GET /js/v-index.js.36b291ca.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=40882
etag: W/"650996d5-9fb2"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=beAOmyn9isQ4nLZBIlQ9V%2F9IJ0HOWNh4N0YhEQyIn1LXBc6UHkwUFIjyeaZ6q%2BDJkre7pGVgZx%2FFUggP%2FBNDAkmFvE9NVC7tnf6OCU4Yv4zGCkwncT3p1dO%2BNfnZiLs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda100b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/config/comments/en.json
188.114.96.1200 OK 4.5 kB URL GET HTTP/3 pauzeeth.top/js/config/comments/en.json
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type Unicode text, UTF-8 text, with very long lines (5173), with no line terminators
Hash 50680109e350a76b2bb8131cdaeb735e
0c14dde15f13c0deefd1ff3eb8c4608e73d133b6
a9ebf6b7ceb48bd6c63b99320183934f2b183af64cc7f27fd85ebe7191d92e42
GET /js/config/comments/en.json HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/json
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EH3bca5kMVLXPjd5NAFtxCyeL5jUR0DhW3l1Rmvz23HDU39gSqjx5%2BzQ%2FAxBhCIB2%2Bi1f4AIUPSrMdi%2Fb6kAqUVUZVXiyDYQ60k0qIpoRTtjC1h2vHcs5gau3%2BLlhqQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7e7c8a0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=8aca3846a5dd4a9b95b2ff6c5352a527
139.45.195.8200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=8aca3846a5dd4a9b95b2ff6c5352a527
IP 139.45.195.8:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintB4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1
ValidityTue, 25 Jul 2023 06:29:27 GMT - Mon, 23 Oct 2023 06:29:26 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 1498d6573a1e661be537e40a01099e3d
218a8afd8a0a84b0793a3d27b8055a4fe1c05290
adf5325dff63f91af89143f35eaddea26fd47973cd7dfea02716c994adb2aef7
GET /gid.js?userId=8aca3846a5dd4a9b95b2ff6c5352a527 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://pauzeeth.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527; expires=Thu, 19 Sep 2024 07:06:55 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offpichuan.com/rotate?zz=4292523;4326645;5128285;4949467;5381238;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=5942381&uid=8aca3846a5dd4a9b95b2ff6c5352a527
139.45.197.237200 OK 4.7 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292523;4326645;5128285;4949467;5381238;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=5942381&uid=8aca3846a5dd4a9b95b2ff6c5352a527
IP 139.45.197.237:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4705), with no line terminators
Hash e0e6ceab83ff01374eddeb125822a310
c74e62cc7943dbe8ea7146d72f9661f94e045b61
86e8ea22fc0c4ed64bb4ab644a588b09d9d98d65c71936daea0336ac028ecd0f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?zz=4292523;4326645;5128285;4949467;5381238;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=5942381&uid=8aca3846a5dd4a9b95b2ff6c5352a527 HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://pauzeeth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: application/javascript
x-trace-id: a599029a6d20ca61b96fb0d342e3694c
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://pauzeeth.top
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=8aca3846a5dd4a9b95b2ff6c5352a527; expires=Thu, 19 Sep 2024 07:06:55 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
pauzeeth.top/js/s-storageService.js.c2d14bf0.js
188.114.96.1200 OK 2.6 kB URL GET HTTP/3 pauzeeth.top/js/s-storageService.js.c2d14bf0.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2624), with no line terminators
Hash ef49c3d67dcb94c0d4effcb46ebd220c
dd5dcb7fc99b6836df7656a34567ab1db3a1d4cd
6804d4fe9595bb423186d8d6d2cd2151515d3dae7d6de69ce43aed6b24eb8e9c
GET /js/s-storageService.js.c2d14bf0.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-a0c"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BFYAvC9o0dtrZD1nWlmzl%2FQZb5x2pZ75bFccuVGZHoT%2BZrrjeEsC%2FT175CjfedcCihLae5AEvI9%2B5EanVqrwU5nU7C78Ubk23NfW%2Bc4BfKvgm2Iq4DQrncqU16DwUyw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda140b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-6.webp
188.114.96.1200 OK 1.9 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-6.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4
GET /img/comments/person-6.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1854
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XAZyhuzTYDFSFDqs8xOOMa9Q5D2ubxE6Rm%2F6YDJ%2FVTnbzD%2BUpH6NvG6WRXKKJGgIn2X15gbSIVWMmQvxvy9aE8PtArfxZxlF6K9yS9J2dl8XAZUCLWErgxqBCJEGjgM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806da20b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/favicon.ico
188.114.96.1200 OK 1.2 kB IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/x-icon
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1613
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3dHc%2Bds1N%2BILhCzA51tbrnTfeaKBeksdfx7mW0sGNxQ4nBwcGm7yuqoRI15l4%2Fz7ju3wqNdLxQd81DBnQ84OTWSGDJ7JkCLU1tQeKLDAqbq79g0oOothUYiRDc4FerU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a824eb80b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/_core-survey.03bfbbcd.js
188.114.96.1200 OK 227 kB URL GET HTTP/3 pauzeeth.top/js/_core-survey.03bfbbcd.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
Size 227 kB (227162 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.03bfbbcd.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=227165
etag: W/"650996d5-3775d"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z7Uw2lnJ73Ioz4xvV9jRGl13Bf1%2Fawoap87VyNIol6wDKKkaN1qZTdFVAOv5hPUWIStgXspNQOocyGPZpO5hH8QvBK0EDdKDFv2Surt7i3Ba8VoOFQT%2F315zTsq0f8A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea1e0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/config/data/sd-1779001.js?v=10
188.114.96.1200 OK 7.2 kB URL GET HTTP/3 pauzeeth.top/js/config/data/sd-1779001.js?v=10
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (7424), with no line terminators
Hash 44608e3e25485e62e651f4945f812c07
cc1f6af6b9d6901e169b0ab433d2f5fd7f7d203d
ad4efefdc3403ccdf64726a0fec9c2d0e59ad64727f575af7bcc3e2845932ab0
GET /js/config/data/sd-1779001.js?v=10 HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-1bf8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VijGv%2BB6pU3GdtBxoemMweiKYbjXI%2BKl2yVaIR1wDe6nsau5YJdvcucxvsTv9AUYliw6OXSF8wvK0FpcEXnGYFQ1YI7UKCTZmpJ5Zg9TObnG4nsYOarnV6tuKOwPigE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7d1b7b0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/css/survey.9a31db7e.css
188.114.96.1200 OK 67 kB URL GET HTTP/3 pauzeeth.top/css/survey.9a31db7e.css
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 58ca444e9100e729279bd786b2b7e725
01b08a8f9efeac55f53c876516732ba1cd15de51
6e200f8f5e1d0e36b17ffe7107ca3d65ec6c23ba9e8e21d00c862f02b3f3618b
GET /css/survey.9a31db7e.css HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=67081
etag: W/"650996d6-10609"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dNbUoGvUAtfTN1qts11eDnT56hOXgN3FSP6SyNaKTtm1giDEJL%2BYxvthYv%2BjiJSCvMRc8%2FLmA9UF7IaUtXHyzd4Ge5N7hsmQmEwgbqw0h95l7E3tTKhO2WaijzpcFVk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea210b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/_is-browser-supported.e5c37b85.js
188.114.96.1200 OK 3.8 kB URL GET HTTP/3 pauzeeth.top/js/_is-browser-supported.e5c37b85.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (4049), with no line terminators
Hash 4b3d3d067a39a2fdf25c097dff3fb0a5
e414e96e16ea37b62c54dbe0a07e6b5ed5bce13c
d1619b1a6c847ca1ad83a50f1b631d0c8d09bd6cd1d0f050014e5718e3209509
GET /js/_is-browser-supported.e5c37b85.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-ee5"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AMkyOq9AyVoY%2Ft%2BT3sZS59oPMbdltRWeMKlAaT6H6rQAereRIa5ILP0kUvCDOCzuQ2P6Wx4CC9TfZ0kzXvqbkeuBsTJusCUe3BrZ6BIArXINa17jYwQoqsCjZnkLqxE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bda040b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-1.webp
188.114.96.1200 OK 1.1 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-1.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
GET /img/comments/person-1.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1122
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6453
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uGsDG2Yz6Dv9i38G4orTkZOJ%2B7p7yVp4p1Z1UG7DzNa6KLVpKNJXeX7vt47BFhC1w3D6WC2Q8Fyy%2F%2BzYHlt5%2BmJPc9UXRWZoWf0vfw1mKYYSCnScCgL9DYlRT4EriUE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806d9a0b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-11.webp
188.114.96.1200 OK 1.5 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-11.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
GET /img/comments/person-11.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1526
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aRzIt07mv%2BQz3V%2BL8M4Guf%2BN27Ng64TyHwFTviVuJ%2Ftc%2B4aP2pQfIhOzbN7QFnxnLdL3app2CjJEjPPj9tf%2BA2ILgAnvt8%2FNib%2BU0r0BdCqmDY1nGZRqMobFmj5QPUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a807dac0b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-8.webp
188.114.96.1200 OK 1.8 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-8.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d
GET /img/comments/person-8.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1802
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u%2Bm7szEP6a%2Bwtk8orPMzLOG%2FBBfk2ml4vcSTcF4ysHsCSFYNSdV9B1OnV1ou2YjLUedW3t7%2FMMq4p9CGJpfIyPDglG6Wu1%2BFz9ATMZwQwtNmh1CjQV1qKQMvDdi4a48%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806da40b69-OSL
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
142.250.74.132200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP 142.250.74.132:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 645cd6634a9669f2b068dbef1be646a0
de9dc91e6daede1d27cec2a2a6aeff03b782b4c6
70a12392169d94b68992cde2d6d35122f73e4c9cd3ed1f3d223dcceaf9da08f4
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Wed, 20 Sep 2023 07:06:55 GMT
date: Wed, 20 Sep 2023 07:06:55 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 558
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pauzeeth.top/img/comments/person-12.webp
188.114.96.1200 OK 1.4 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-12.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e
GET /img/comments/person-12.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1390
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KSCe%2BMtrcyGrFgAk4%2Fm6e0OfKLVtpLFHmmg%2FQU13TqEX41qqCxzmt%2BInMiDSNNyM%2FFGwWa536L5zPtdT7ZhEOTS7AvACabVtro0GRFvs4wZFhLxdPSc6skezZGFv208%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a807dad0b69-OSL
alt-svc: h3=":443"; ma=86400
pauzeeth.top/js/_each-land-config.55456aef.js
188.114.96.1200 OK 73 kB URL GET HTTP/3 pauzeeth.top/js/_each-land-config.55456aef.js
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0659c7e1ef2cf3ac5cfa7dca585be96f
f414c1ede0fcafb7a4f656955e958c78e27d842b
eab0f7db0e4581057d4a7eadfd5630dab661ec933bc800c5cba592d912b47f3d
GET /js/_each-land-config.55456aef.js HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:54 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72713
etag: W/"650996d6-11c09"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2684
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zEsEFcWR4Sb60meggAzBz4V1wDwjfD37uILANzqKlGQUCqaE7WB2BvGYSynOkBTsMsIJmg3QwvxZfGr9oNosfM7ueMx6YFe%2BIixn53XzXDMWol%2FZXfzxc9iF6wHt4OE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a7bea1b0b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/sw/sw6163203.js?var=3956710&var_3=728257042697167786&var_4=null&ymid=5942381&ab2_ttl=5184000000
188.114.96.1200 OK 1.3 kB URL GET HTTP/3 pauzeeth.top/sw/sw6163203.js?var=3956710&var_3=728257042697167786&var_4=null&ymid=5942381&ab2_ttl=5184000000
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash 849a6c66f58cb89bf2ff6062f565e221
bf062cc02843667564e3b1ac1d13deb9c5206311
5779075245c78b9848a240be3ee8d4ea5aaca38e1642cd6a6af896e58663ba47
GET /sw/sw6163203.js?var=3956710&var_3=728257042697167786&var_4=null&ymid=5942381&ab2_ttl=5184000000 HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:56 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f3%2FWtbQvpa%2FQxYUUCOGZcRKcYitEFIQ3ZJ%2F3ZbhxzlVgxaBo37OlSMAzxNnP%2F4dACRRM2vQt1ksdh5T6wWiqZ0dOMVJb6PyylTujxvWlPFSkqx9IjscGog3QtUn6VG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a842fc90b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
pauzeeth.top/img/comments/person-5.webp
188.114.96.1200 OK 1.8 kB URL GET HTTP/3 pauzeeth.top/img/comments/person-5.webp
IP 188.114.96.1:443
Requested by https://pauzeeth.top/survey.html?offer_id=1916&geo=NO&oaid=8aca3846a5dd4a9b95b2ff6c5352a527&s=728257042697167786&z=3956710&var=5942381&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectpauzeeth.top
Fingerprint21:D0:17:E5:87:0B:AA:A2:C6:77:8A:86:43:43:36:F7:1A:C3:41:86
ValidityThu, 14 Sep 2023 08:35:21 GMT - Wed, 13 Dec 2023 08:35:20 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
GET /img/comments/person-5.webp HTTP/1.1
Host: pauzeeth.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=8aca3846a5dd4a9b95b2ff6c5352a527
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 07:06:55 GMT
content-type: image/webp
content-length: 1846
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6452
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EMZIIUSkLBIiV802gsxtEbK7GUXAawQXFWecSz8HtmdcTJk4miZvvhEzLWiQ7u0i5vhqcST4TC2zNrKlup5pyE0nT4J6W56Mk4gIKgVTLJd3%2BkPzlf1ohitrnvIrIZs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80983a806da10b69-OSL
alt-svc: h3=":443"; ma=86400