trk.mrtccvstr.click/dddfb2fd-fa20-49a4-a72e-01cb2c86cad2
18.195.23.231302 0 B URL HTTP/1.1 trk.mrtccvstr.click/dddfb2fd-fa20-49a4-a72e-01cb2c86cad2
IP 18.195.23.231:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /dddfb2fd-fa20-49a4-a72e-01cb2c86cad2 HTTP/1.1
Host: trk.mrtccvstr.click
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302
Server: nginx
Date: Sat, 03 Dec 2022 10:19:22 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-store, no-cache, pre-check=0, post-check=0
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Location: https://paidfromsurveys.com/best-paid-surveys-in-uae
Pragma: no-cache
Set-Cookie: dddfb2fd-fa20-49a4-a72e-01cb2c86cad2-v4=wCcdgWaBdf6H29fyXGQZAiNsSYDlkrzyI2lwBYn82us; Max-Age=86400; Expires=Sun, 04-Dec-2022 10:19:22 GMT; Domain=trk.mrtccvstr.click; Path=/; HttpOnly
cc-v4=kXGmb5vFS9vfcuY%2FxCMM7f1CvfArjgO2EX8A7D7jW2QE10TA0xkfSOdH5xjKevioDxXNVk8RBhbASXnyz1rQoxhzefdo61YjGQWXdtVyAV8UcsHqG0MxH4xLGUK15%2BUCb3dmdDq9fEQmWpCfLsGzHA%3D%3D; Max-Age=31536000; Expires=Sun, 03-Dec-2023 10:19:22 GMT; Domain=trk.mrtccvstr.click; Path=/; HttpOnly
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10707
Expires: Sat, 03 Dec 2022 13:17:50 GMT
Date: Sat, 03 Dec 2022 10:19:23 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3435
Cache-Control: max-age=90547
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:23 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 11:28:30 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9458
Expires: Sat, 03 Dec 2022 12:57:01 GMT
Date: Sat, 03 Dec 2022 10:19:23 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 09:19:59 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3564
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3K/OX1Ayba1XGp6B0aXB+Y+uv5GM2EFlqr6ZMn2xU9H6GC3eUt7wbGueHLouISyCvygeTLfXp/Y=
x-amz-request-id: 1FP167GT40XH4VN2
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 09:46:31 GMT
age: 1972
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 03 Dec 2022 10:19:23 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 10:08:58 GMT
cache-control: public,max-age=3600
age: 625
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9785dffb4d23dcc6039846943559dd42
7f8d5a73e6c130e4563f679a7c178bb1617b43a2
d7a75e22ffa5e50acb8a71d64b55cba44acb4b1a1b7796d231a1d893689d8e25
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7A75E22FFA5E50ACB8A71D64B55CBA44ACB4B1A1B7796D231A1D893689D8E25"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14566
Expires: Sat, 03 Dec 2022 14:22:09 GMT
Date: Sat, 03 Dec 2022 10:19:23 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash a151c326c67e1abb747847c1427db76f
80885d30ef8ba867bf33c40b861976958a27493a
de2b573ee1c8af980e593352e0c331b2595f62bd4499300ace30821d20814760
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3439
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:23 GMT
Etag: "6389c02e-1d7"
Last-Modified: Sat, 03 Dec 2022 09:22:04 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
paidfromsurveys.com/best-paid-surveys-in-uae
52.86.231.191200 OK 78 kB URL HTTP/1.1 paidfromsurveys.com/best-paid-surveys-in-uae
IP 52.86.231.191:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (45059)
Hash 5b12e1ebc4f638c6172129dead77fe10
2adddb4d67bbace4449954bee3a9dbbbe1adf25e
945445728f58d609f47bf925497b37a7b553edca48bbbfdb01c5b3b33ac2fbf3
GET /best-paid-surveys-in-uae HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:23 GMT
Server: Apache/2.4.37 (Debian)
X-Powered-By: PHP/7.3.9
X-Pingback: https://paidfromsurveys.com/xmlrpc.php
X-UA-Compatible: IE=edge
Link: <https://paidfromsurveys.com/wp-json/>; rel="https://api.w.org/", <https://paidfromsurveys.com/wp-json/wp/v2/posts/50448>; rel="alternate"; type="application/json", <https://paidfromsurveys.com/?p=50448>; rel=shortlink
Vary: X-Forwarded-Proto,Accept-Encoding
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 06:22:51 GMT
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
SiteSpeed: b02ba897b7ffd702a21c162555651e24.raw.gz 3.46
Content-Length: 77960
paidfromsurveys.com/wp-content/themes/generatepress/assets/fonts/generatepress.woff2
52.86.231.191200 OK 1.3 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/themes/generatepress/assets/fonts/generatepress.woff2
IP 52.86.231.191:0
File type Web Open Font Format (Version 2), TrueType, length 1264, version 1.0\012- data
Hash 0d7a3856791d51d00e05c26de32bd4e2
701425f116cfd1f4170a675070a3a75a3120f6e3
255491ef6837e5f46338991d95f0a84adcf81af00a096c5dcc82b16bcc4d9f22
GET /wp-content/themes/generatepress/assets/fonts/generatepress.woff2 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:23 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 26 Nov 2022 00:56:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:23 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1287
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff2
paidfromsurveys.com/wp-includes/js/jquery/jquery-migrate.min.js
52.86.231.191200 OK 4.2 kB URL HTTP/1.1 paidfromsurveys.com/wp-includes/js/jquery/jquery-migrate.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (11126)
Hash 5629711d7fdd5b28441bac39b851299f
4e0bf2b7383097f7c352023a1b1b1b48a50356b6
44c444309c7a6c05ff4a9bc198bed9e9596bedb5658637c85689c9a471dcdd16
GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 09 Dec 2020 06:38:24 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4169
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
push.services.mozilla.com/
54.187.102.159101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.187.102.159:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: O/0dtjNHY7qtfNpBLtEAww==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: IV0midJU2ixk1tq2cp3peNXr2dY=
paidfromsurveys.com/wp-content/themes/generatepress/assets/js/menu.min.js
52.86.231.191200 OK 1.7 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/themes/generatepress/assets/js/menu.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (6940), with no line terminators
Hash 1a94843105210db320afd5e4828b7da1
d8df854b2fe887eea3f57d70f7077b749c733525
1412fcd9ddff0a1d7171762a58818592035df0dbea4d86c2676157219e368ffd
GET /wp-content/themes/generatepress/assets/js/menu.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 26 Nov 2022 00:56:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1651
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499
52.86.231.191200 OK 470 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499
IP 52.86.231.191:0
Hash a2c4aaf991bf5cb1727e4d289233d302
2e0547b94fd55591124ae7e99f3ec5591c2ca10e
8d3eaf0682ab9993e95e3a9970fa7653c862c330b216fea8de52cab03a08d8df
GET /wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Mon, 07 Mar 2022 12:43:24 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 470
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/css; charset=utf-8
paidfromsurveys.com/wp-content/themes/generatepress/assets/js/navigation-search.min.js
52.86.231.191200 OK 767 B URL HTTP/1.1 paidfromsurveys.com/wp-content/themes/generatepress/assets/js/navigation-search.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (2136), with no line terminators
Hash 1b58fce4946b974785d6d00e80952868
1dfaf3933897c1920ff44ab60f00cca62f1ac6d0
ef30fde07ccd4a52d4553fb2852c3edabc4246a81efb471aee157a614ab56e6b
GET /wp-content/themes/generatepress/assets/js/navigation-search.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 26 Nov 2022 00:56:41 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 767
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
paidfromsurveys.com/wp-includes/js/comment-reply.min.js
52.86.231.191200 OK 1.4 kB URL HTTP/1.1 paidfromsurveys.com/wp-includes/js/comment-reply.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (2946)
Hash 28214bc78b9edfcfbc9c7b651fb4f56c
fb0847abdb33dd943a2dcda4c4b905fb5cdd116c
11691bc1acc1f3a7ab8ef7c67fb720ca58fb72e52f510009f7b0cbc2589d45e0
GET /wp-includes/js/comment-reply.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 25 May 2022 04:59:31 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1351
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
paidfromsurveys.com/wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js
52.86.231.191200 OK 2.8 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (8518), with no line terminators
Hash 34cb936fb42aab383760054a0b520f74
dd82f100df34577cdfeee132c0456b1578e58ba6
e14252290905d036149b61ad3b8c65b0a111267a72a9637d1379cf205c9e9b18
GET /wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 09 Nov 2022 20:45:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2839
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-PX7PCGZ
142.250.74.40200 OK 40 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-PX7PCGZ
IP 142.250.74.40:0
File type ASCII text, with very long lines (2154)
Hash 427749003b85d0e049de4136be451ced
ada458ad8f26a89966b59e3b9d949fd749c01aa9
fa251a40430501c0661462d3ab59c9e7bec793651cef959e5caf2d680d45df80
GET /gtm.js?id=GTM-PX7PCGZ HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 10:19:24 GMT
expires: Sat, 03 Dec 2022 10:19:24 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39866
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
paidfromsurveys.com/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js
52.86.231.191200 OK 4.1 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (7862)
Hash ea443a71626e6c5188a175df31482994
b06e76958bc2dd62bcc3c094bdd7c1a79d33f7ea
0bed4a9a59b7963e63a6fe6ce67a83846294323bc168c71878efb829509f00dd
GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 23 Oct 2022 05:56:35 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4122
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
paidfromsurveys.com/hashcash.js
52.86.231.191200 OK 3.1 kB URL HTTP/1.1 paidfromsurveys.com/hashcash.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (541)
Hash 3f4f2796e7667bcc0bdfa9c9ea022b5a
e3bcbc32d05f3b3a2c9c7bb80667891a3fb15e99
8f775649349d70519d40951f1a46017d4b2df101e3bfb45fdb932d7fc2ee83e2
GET /hashcash.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Vary: X-Forwarded-Proto,Accept-Encoding
Last-Modified: Wed, 25 Apr 2018 21:14:41 GMT
ETag: "1d69-56ab2c25ab240-gzip"
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 03:12:58 GMT
Content-Encoding: gzip
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
SiteSpeed: 3a1218c840b273300ef5dc2699ad01da.raw.gz 3.46
Content-Length: 3111
paidfromsurveys.com/wp-content/plugins/social-warfare/assets/js/script.min.js
52.86.231.191200 OK 5.9 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/plugins/social-warfare/assets/js/script.min.js
IP 52.86.231.191:0
File type Unicode text, UTF-8 text, with very long lines (21730)
Hash c60ef51293de07c9bc0a163875505a30
c7af8375dc928775a71cb7cfa1c75b6ba3f339a1
6c60adce68ca6e578dd6c5970983f1e2e44c66786979a0cfa553b3280a5e8970
GET /wp-content/plugins/social-warfare/assets/js/script.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 20 Jul 2021 18:09:04 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5914
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash e63a3fb1ef1a4ebbbd126969d6ee68ca
8bc9c26950b3899087e25ddea159c28f57b47200
f2ec30377e239f64286ae7dde8032e4e332b6c123f7decc07126fbbcff460a69
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
paidfromsurveys.com/wp-includes/js/jquery/jquery.min.js
52.86.231.191200 OK 31 kB URL HTTP/1.1 paidfromsurveys.com/wp-includes/js/jquery/jquery.min.js
IP 52.86.231.191:0
File type ASCII text, with very long lines (65447)
Hash 1b5264c989379b828aff60f65a518a24
98641237f14ccb33ac114f54329a33bd0aa17eb7
6c8e7b78c6dbc13426810c905572db7589cf3e00264e30ce797fddb0b1092237
GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 02 Nov 2022 10:20:05 GMT
Accept-Ranges: bytes
Cache-Control: max-age=31536000
Expires: Sun, 03 Dec 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30995
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript; charset=utf-8
paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-normal-400.woff2
52.86.231.191200 OK 17 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-normal-400.woff2
IP 52.86.231.191:0
File type Web Open Font Format (Version 2), TrueType, length 16692, version 1.0\012- data
Hash d65113b6da7ba4bd0a59dbda5a7e24d4
929ecf3ad6ab03123a7bad0609b4b8ba1623d4e8
cce577471c2586f3e0c2518fff84a970d33f61491fb8c629341b86f238cf07c0
GET /wp-content/uploads/omgf/generate-fonts/open-sans-normal-400.woff2 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Mon, 07 Mar 2022 12:43:23 GMT
Accept-Ranges: bytes
Content-Length: 16692
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff2
paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-normal-600.woff2
52.86.231.191200 OK 17 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-normal-600.woff2
IP 52.86.231.191:0
File type Web Open Font Format (Version 2), TrueType, length 16712, version 1.0\012- data
Hash 1f577b061e6e464e2c949faee6518469
8acf6682f8050be9b4c7fb3e85138971d6fae51c
578ea33c3a1daec87277cd626647c55f3e0abd72c0673cde0fe40d4fb8fd5579
GET /wp-content/uploads/omgf/generate-fonts/open-sans-normal-600.woff2 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Mon, 07 Mar 2022 12:43:23 GMT
Accept-Ranges: bytes
Content-Length: 16712
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff2
paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-normal-700.woff2
52.86.231.191200 OK 16 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-normal-700.woff2
IP 52.86.231.191:0
File type Web Open Font Format (Version 2), TrueType, length 16408, version 1.0\012- data
Hash 875ba54801f7cf83ea70abf613fab665
a747343db86c1ba5d10d6cb1814fd6ac6db42b65
a61d67250a5c36640e22099937af31613e68d6134439d5d4329efea0372aea79
GET /wp-content/uploads/omgf/generate-fonts/open-sans-normal-700.woff2 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Mon, 07 Mar 2022 12:43:23 GMT
Accept-Ranges: bytes
Content-Length: 16408
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: font/woff2
paidfromsurveys.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.3.0
52.86.231.191200 OK 7.6 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.3.0
IP 52.86.231.191:0
File type Web Open Font Format, TrueType, length 7556, version 1.0\012- data
Hash ab60b7f7205aef74a5ee8310fe9182bf
d52dde8b1c1b7649e0705ffe13cb79a66503d942
607f69d2ac4f67c9ab5753f5176c18096b5b6d1128ab9f9da3720563c0824e64
GET /wp-content/plugins/social-warfare/assets/fonts/sw-icon-font.woff?ver=4.3.0 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 20 Jul 2021 18:09:04 GMT
Accept-Ranges: bytes
Content-Length: 7556
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: font/woff
paidfromsurveys.com/wp-content/uploads/2020/06/paidfromsurveys-header-logo.png
52.86.231.191200 OK 4.7 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/06/paidfromsurveys-header-logo.png
IP 52.86.231.191:0
File type PNG image data, 300 x 110, 8-bit colormap, non-interlaced\012- data
Hash b513b8a201a681bffd84d9876c2b116d
d91ebd9b118d568c33efe27f2c4a4fba25c6961f
16d90ef08040780c8141ce2600e5f4bc9f10c704f92abe06eb4554d66b81caf4
GET /wp-content/uploads/2020/06/paidfromsurveys-header-logo.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 10:16:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4735
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-italic-400.woff2
52.86.231.191200 OK 18 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/open-sans-italic-400.woff2
IP 52.86.231.191:0
File type Web Open Font Format (Version 2), TrueType, length 17768, version 1.0\012- data
Hash b42f06e6ecc6ae551b010ba0ff4fa6a3
363c4ff155d5e82e88d9dfe31e129dcf62b4dced
f27408b033a0195d0f29b0ecbc143f470c4fbb0807472a688b2f9e66403651e0
GET /wp-content/uploads/omgf/generate-fonts/open-sans-italic-400.woff2 HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://paidfromsurveys.com/wp-content/uploads/omgf/generate-fonts/generate-fonts.css?ver=1647289499
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Mon, 07 Mar 2022 12:43:24 GMT
Accept-Ranges: bytes
Content-Length: 17768
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: font/woff2
paidfromsurveys.com/wp-content/uploads/2020/05/how-to-get-paid-from-surveys-homepage.jpg
52.86.231.191200 OK 102 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/05/how-to-get-paid-from-surveys-homepage.jpg
IP 52.86.231.191:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x720, components 3\012- data
Size 102 kB (102521 bytes)
Hash 2486d454f3c2b9e6bc31c295fcb2a361
2ca4cf70b7c56b97245d3fa906ba0c8e3cf2d5cc
fe2dc5fe963a18a85ca78595c1dbd7df1c42fedc4dab9454d42f53053c9d262f
GET /wp-content/uploads/2020/05/how-to-get-paid-from-surveys-homepage.jpg HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:22:32 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1f3a4f3edea56419c58836a0c80d5cea
1558a7ad0acc0c09cdf39ec92030f7ee5736e595
70aeda0cb136ac1add86931a338558b9f302576cd65537575d232fda623fe2f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
142.250.74.110200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP 142.250.74.110:0
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 08:41:08 GMT
expires: Sat, 03 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 5896
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
paidfromsurveys.com/wp-content/uploads/2020/01/cropped-paidfromsurveys-fav-icon-32x32.png
52.86.231.191200 OK 2.0 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/01/cropped-paidfromsurveys-fav-icon-32x32.png
IP 52.86.231.191:0
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash cd1c35bc9fc3956ed31020d15dcb72e9
546835d6a6dc326d6a73b54abf99d555763b8488
77136bde06fbd0ba5f1d888866812942da1a58f39a329f57e23c6931f312bfa5
GET /wp-content/uploads/2020/01/cropped-paidfromsurveys-fav-icon-32x32.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:21:48 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1955
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/01/cropped-paidfromsurveys-fav-icon-192x192.png
52.86.231.191200 OK 17 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/01/cropped-paidfromsurveys-fav-icon-192x192.png
IP 52.86.231.191:0
File type PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced\012- data
Hash 59fa2057fddb24e1c0356304eac18933
88855a1f812fbdd4ac8cdd3e5be611fb1f704656
4f3d85b91fa87b311b13f940c6ea2a785634fde68f271e807b04291caf2f231b
GET /wp-content/uploads/2020/01/cropped-paidfromsurveys-fav-icon-192x192.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:21:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16935
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 1f3a4f3edea56419c58836a0c80d5cea
1558a7ad0acc0c09cdf39ec92030f7ee5736e595
70aeda0cb136ac1add86931a338558b9f302576cd65537575d232fda623fe2f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:24 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
paidfromsurveys.com/wp-content/uploads/2020/10/argentina-surveys-flag-small.png
52.86.231.191200 OK 173 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/10/argentina-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 1e2675a7c246a3a9d9bd8e9d8ebf6308
bd96b3bb16a0c4ed6c51d846d922871e287a6986
e99d78d8e926aadee856515fca1859a8afc75bdc87b6acb3dac0ed776666fb03
GET /wp-content/uploads/2020/10/argentina-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 21:46:19 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 173
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2017/11/american-surveys-flag-small.png
52.86.231.191200 OK 800 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2017/11/american-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash ece5b663cbdb326078af3a326aa88fcd
94c6732a4a3d83b3489ab14d0269a6307e8a30f0
d471381a1bbae2362e17a00ab897b2a2892a7b4c778d9fd8fe8ca84e356d1c4b
GET /wp-content/uploads/2017/11/american-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:16:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 800
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2017/11/australia-survey-sites-flag-small.png
52.86.231.191200 OK 1.1 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2017/11/australia-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash c744b0a30ef72fe3256da68988959e0e
9d62be46340a9b86282cfc104f284c06fc7f097a
850d03d7518bcc86ea82a1bcf6caa58295af949858e2427215370e3096217598
GET /wp-content/uploads/2017/11/australia-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:16:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1082
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/11/austria-surveys-flag-small.png
52.86.231.191200 OK 119 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/11/austria-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 2-bit colormap, non-interlaced\012- data
Hash 17b9c8b6ed168121a6beaf7ba4c90bbb
503a5b322fcf88be6f4f1dc104aac1ecd71e68eb
33391d2f1cf40e773740d4b94b176703d1aad232248bc22569967c62c510f56e
GET /wp-content/uploads/2020/11/austria-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 21:31:25 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 119
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/09/belgium-surveys-flag-small.png
52.86.231.191200 OK 117 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/09/belgium-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash f065ef8ce7d54818cf22eed4b1e7c37e
e970c17d27373b1da801881aab24507e4406bc14
207cce165c40ac41d9b2c6efe5bb77518a4af12817fefdc9f53b567358e8eade
GET /wp-content/uploads/2020/09/belgium-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 08:30:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 117
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2019/05/brazil-survey-sites-flag-small.png
52.86.231.191200 OK 622 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2019/05/brazil-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash 39cbf42a3ecea0094473eef5d41e3194
df2572a771013161f8cb99c91a4a851905855046
7bd55ea3ca47484611c3bd17d14a211e0e69c826947b1c8b40729e32e66b4430
GET /wp-content/uploads/2019/05/brazil-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:20:16 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 622
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2021/02/bulgaria-surveys-flag-small.png
52.86.231.191200 OK 129 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2021/02/bulgaria-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash f7af84db6b23a8a8745b512d38e1d5f7
5b337e081f3260f3208de6635f42935974fecfe4
219322fdd8db6ce3f766c55a68476fa8296217bfbab9e7edab78de647d075404
GET /wp-content/uploads/2021/02/bulgaria-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Thu, 11 Feb 2021 20:25:52 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 129
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/09/chile-surveys-flag-small.png
52.86.231.191200 OK 165 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/09/chile-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 1e3313d60a9e9f4433114d66ae0244bc
947fec8f1ed9f441d4adaaabdc3c05442661e599
97a6143f6d3d67689de8ae12f244e5da864cfdcb08da179309de3aa04c93a286
GET /wp-content/uploads/2020/09/chile-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 08:24:14 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 165
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2017/11/canada-survey-sites-flag-small.png
52.86.231.191200 OK 599 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2017/11/canada-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash ef7e2b8d2abda72a937177b17d04a5aa
7618ecdd9ae10a669440a3622ea8cf5238793830
a4dcf1e5cd42f7184c6ecbee0fb11244be797b630e43bb3184bbd4d4a36d0d63
GET /wp-content/uploads/2017/11/canada-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:16:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 599
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2019/03/best-paid-surveys-in-uae-header.png
52.86.231.191200 OK 11 kB URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2019/03/best-paid-surveys-in-uae-header.png
IP 52.86.231.191:0
File type PNG image data, 350 x 245, 8-bit colormap, non-interlaced\012- data
Hash 4143cba143a0f11b47bd26e6eaf23368
75cbef0fadc1b739b1cd49e01aa1bf94de1bc5e6
f3d010a2ba979e6887b49c9d374276b44d2400ec6db4f74a614be81b6748958c
GET /wp-content/uploads/2019/03/best-paid-surveys-in-uae-header.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:20:53 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 10647
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2021/01/china-surveys-flag-small.png
52.86.231.191200 OK 174 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2021/01/china-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash f096224dcba8434d9b089bf4b69a1ecd
efac742bb2edc51b3113ab57b071edce217c8b88
0db7d5883b83bfa6246589d11da9f2e43f2bcf51c6d2dfb1036f09a873707428
GET /wp-content/uploads/2021/01/china-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 20:42:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 174
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2021/01/colombia-surveys-flag-small.png
52.86.231.191200 OK 130 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2021/01/colombia-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 9548334e765820347692cb1c72a6098b
0344170a1bf9d5a03bce0e5a39542a3c289daaad
75642404b3560d6d6a9f7072cbc1ca188a41b8341c035504390b28a4095f43cb
GET /wp-content/uploads/2021/01/colombia-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 26 Jan 2021 19:45:17 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 130
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2021/01/czech-surveys-flag-small.png
52.86.231.191200 OK 275 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2021/01/czech-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 72b002e56ebc23f125ec7a85528a77b3
00dd703c6755b891e1c43d03cb1d39b8da85316d
4d3c57079a0eae2c4b9caaac659d770e7591c3a732260eed230da7fe7a52363e
GET /wp-content/uploads/2021/01/czech-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 20:35:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 275
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2018/07/denmark-surveys-flag-small.png
52.86.231.191200 OK 285 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/07/denmark-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash b9d3da6dcd9dad2b095d9c0248c2381c
61991a19e248fd44814ba391b1776d5f3901d152
fc17ba1e3860b24028f65935afc3cca00f45f0c951b8a7588ed7615844b609d8
GET /wp-content/uploads/2018/07/denmark-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:24 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:15:40 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:24 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 285
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/12/egypt-surveys-flag-small.png
52.86.231.191200 OK 175 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/12/egypt-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 4ee048481f8042c0ab523b5db84b423b
40a98d6e2bbd5a1a15c8ba9f92b8e2b38b6580e1
66a948f42b64e310109dbe5adf849ce3d4fd2de90ccf6ec9d7e9c9da483c32ee
GET /wp-content/uploads/2020/12/egypt-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 21:10:35 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 175
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/02/finland-surveys-flag-small.png
52.86.231.191200 OK 135 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/02/finland-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash aaba998ec5f926916c8ae0fdb7965ccc
8c6e307978c77134cfab34068ab768a03b12e180
04b7381edeefffcb16385f90bcf79dd2f23e88e968db3479cc05093c3cd49a9d
GET /wp-content/uploads/2020/02/finland-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 12:24:07 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 135
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2017/12/germany-small-flag.png
52.86.231.191200 OK 140 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2017/12/germany-small-flag.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 23c70a2756870c14d5425364f6288084
b0e4b6a3b1e6780364e6da657cbfc75dc1701028
f7f9cdb612d42b3592cf8f0809431dff3bbd5e1551981f055d43643314ae7d84
GET /wp-content/uploads/2017/12/germany-small-flag.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:16:26 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 140
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/07/Greece-surveys-flag-small.png
52.86.231.191200 OK 219 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/07/Greece-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 46c4d4375ee5e9e5bbbb953e5e30c431
c88d5aff6620632c5f26a9f7fa20f8feffa0eaf9
97b928028083ae0d4d6128420173da2aa04d2c0af68e3291ff8c95eee2ed8f69
GET /wp-content/uploads/2020/07/Greece-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 09:38:32 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 219
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2018/01/france-survey-flag-small.png
52.86.231.191200 OK 141 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/01/france-survey-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 65a8e5295975223ee6a0024ec20089cb
c389ed837a9007bf566a0e9feae168adf6bd902c
b362ca38d8e6103b361b1a7951ca0874d40ce1c3c81d9451e75f2e16e6e0fd4a
GET /wp-content/uploads/2018/01/france-survey-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:15:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 141
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2018/10/hong-kong-surveys-flag-small.png
52.86.231.191200 OK 381 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/10/hong-kong-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash cbd330a01e532e581660de32960fb094
3b8ddfd80a9fb7b37592873e869aac65105a23fd
527f76c2bc48c7fef132733c8a117eaafa7e1a1e35e6a063d03b014d94319ce6
GET /wp-content/uploads/2018/10/hong-kong-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:15:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:25 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 381
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 08ca0238100c906a665f21b1caa97f47
3f605891faeafb51a36cecd25d331bcc450d34e9
35dac74d71c723f7a8e7585174fad51a0115e4a294a2c0d80b63026e25825618
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-88520514-1&cid=988245579.1670062763&jid=1153042025&gjid=1018328443&_gid=133655845.1670062763&_u=YADAAUAAAAAAACAAI~&z=1250687185
64.233.165.154200 OK 1 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-88520514-1&cid=988245579.1670062763&jid=1153042025&gjid=1018328443&_gid=133655845.1670062763&_u=YADAAUAAAAAAACAAI~&z=1250687185
IP 64.233.165.154:0
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-88520514-1&cid=988245579.1670062763&jid=1153042025&gjid=1018328443&_gid=133655845.1670062763&_u=YADAAUAAAAAAACAAI~&z=1250687185 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://paidfromsurveys.com
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Sat, 03 Dec 2022 10:19:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8cda61682f6c374683f42deaf2dfc11c
5bd7391caf5268f41d3747df1fb4fb4733d19411
041ed9c801328fe0be0f5239fc34fed9c802a9dbb22371bcf12d58e464944e7f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "041ED9C801328FE0BE0F5239FC34FED9C802A9DBB22371BCF12D58E464944E7F"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14120
Expires: Sat, 03 Dec 2022 14:14:45 GMT
Date: Sat, 03 Dec 2022 10:19:25 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3325
Expires: Sat, 03 Dec 2022 11:14:50 GMT
Date: Sat, 03 Dec 2022 10:19:25 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 933bd2bc7dd004d74961dfc0878c1d22
8a4f50edb54fea8ffa604f5ca593345341ce15a1
252363badd64d5ec8ad9eb56af41e44bb094d8c80646dd228e90dba5e56c87b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3984
Cache-Control: max-age=153722
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:25 GMT
Etag: "638ac897-1d7"
Expires: Mon, 05 Dec 2022 05:01:27 GMT
Last-Modified: Sat, 03 Dec 2022 03:55:03 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3325
Expires: Sat, 03 Dec 2022 11:14:50 GMT
Date: Sat, 03 Dec 2022 10:19:25 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 08ca0238100c906a665f21b1caa97f47
3f605891faeafb51a36cecd25d331bcc450d34e9
35dac74d71c723f7a8e7585174fad51a0115e4a294a2c0d80b63026e25825618
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:25 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Dec 2022 06:00:50 GMT
age: 15515
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
34.120.237.76200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 249aec334460c66dc88b9e8def4e48df
f86d1d278ba5b24587b10519b1b30d75044efd97
b083151804ced0533a5b33302ef110b50ddc4bf653de0fb8f6c7711f4bc29fe2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6e545217-31b4-442a-abef-bcaaffcd0407.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9449
x-amzn-requestid: c21c52f9-d971-46d9-b632-0439a0e23da4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZkxHKbIAMFxkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6fb7-2b8cc0982af568626f4a4bbf;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:35:51 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: h_QxhlhIxUS0VSjt1z50xNf0u1eB6c1WPTJUfvwGQA-t4M0zmXo2AA==
via: 1.1 b838ef1ff22a4a994af82d5178c30e1c.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:03:42 GMT
etag: "f86d1d278ba5b24587b10519b1b30d75044efd97"
content-type: image/jpeg
age: 44143
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
34.120.237.76200 OK 7.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3abdcce275bb9723b4ac1d0c38cc8891
91f0d888c38db0899f106b652e3dcac062648099
ff411fc0d5abaf519d6600961ec51ad71ad9a02e23cc02ad818e27f0324b3d1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F528dcb40-0960-4efd-98b7-a07004a61b22.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7657
x-amzn-requestid: c0dbd862-41cf-4fa8-ab6b-256763c63fbf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ciZN1Fo6IAMF9EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a6f25-554ffbc83fd70c557437120f;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 21:33:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ElvfdUly4Rb3YOQyMO2C_VelFUe6xcFbMh6x5fNrRzGjKCITdGSwLQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:47 GMT
age: 45698
etag: "91f0d888c38db0899f106b652e3dcac062648099"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ffa12df550123f63b20f67437cd8a04
398fd2d837c73f54c4591b69cd683f29bdf9184a
fd9ac4396488098923c27531295e64475047dd008a901e59915109a73a69f305
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F652bfe35-9b09-4fba-b7b5-c6bd90cccdbe.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6119
x-amzn-requestid: b0bf3aed-f968-4ebb-953e-35300d74ef16
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdCe8GgNIAMFQag=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63884ac5-4b20ca67753e65c5232660f5;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 06:33:41 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: axyk2U1R7AX1RVQmdc303S2S2CUs_RgphyeYPsbGveGHMAjY3KEzdw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 13:19:35 GMT
age: 75590
etag: "398fd2d837c73f54c4591b69cd683f29bdf9184a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
34.120.237.76200 OK 2.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b47431190f34eccf0a6efb98e2a32b7d
9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704
08d3b6be354cafb70c20e6865788cb375adbf88d47711651fe1a3b855094daf2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b6b798b-d396-454d-9d5b-17b47827e4ad.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2942
x-amzn-requestid: ed26679f-cd56-477f-9914-f9afbcaaeea6
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGeoGFYoAMFWgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891df7-4ec6bebe21656d5026456994;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XvG2dAUeB914GQ1qJwQRHovAtra8OSjG-CsXeR8UOBq5r8qVjEbPBQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 22:39:04 GMT
age: 42021
etag: "9fc7ab3a4eb2d36fd6df7e0267a26a47627d1704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash becc8cdba57494c6fe212eb67634e1eb
c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8
fbb25b88b10a818bb0c6ad385b1e5ba54b87672c73bfa8a9c1ecb17dcc689d5a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3d568a89-ee21-427a-b971-0d1500164a62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11942
x-amzn-requestid: ba8a5d03-7796-4c6d-a6df-3cc71b1c5259
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: chqukGmWoAMFtLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a24c3-609dc90d769060d30a16e3df;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 16:16:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: m6j_3bDGFIAHQYzrZ1zXqUb-HbEJ8XCoGH5mgBFOWRbLzoSiuNBnhg==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 21:37:55 GMT
etag: "c8bd6bd9086e0a52b83b89dfd755e7ebba222fb8"
content-type: image/jpeg
age: 45690
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn.convertbox.com/convertbox/js/embed.js
194.242.11.186200 OK 29 kB URL HTTP/2 cdn.convertbox.com/convertbox/js/embed.js
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
File type ASCII text, with very long lines (3071), with no line terminators
Hash 8c8b2d020c52536272119530e8f406a1
09eb28a392d1889c8efb85acd43a4ba3dc37b6ae
a012ce0a78cd8847933e37c8d2ea75a22e79e13488936449f2986b06b834a47f
GET /convertbox/js/embed.js HTTP/1.1
Host: cdn.convertbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 10:19:25 GMT
content-type: application/javascript; charset=utf-8
server: BunnyCDN-NO1-830
cdn-pullzone: 53020
cdn-uid: 0efa3f5e-1cdb-4f24-96b0-16bfe6c0cf31
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"638838fe-bff"
last-modified: Thu, 01 Dec 2022 05:17:50 GMT
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 12/01/2022 05:32:17
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 99c96d956633d43cc77c88a1e2700773
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 933bd2bc7dd004d74961dfc0878c1d22
8a4f50edb54fea8ffa604f5ca593345341ce15a1
252363badd64d5ec8ad9eb56af41e44bb094d8c80646dd228e90dba5e56c87b8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3984
Cache-Control: max-age=153722
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:25 GMT
Etag: "638ac897-1d7"
Expires: Mon, 05 Dec 2022 05:01:27 GMT
Last-Modified: Sat, 03 Dec 2022 03:55:03 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
region1.google-analytics.com/g/collect?v=2&tid=G-JBM7DJ4MZC>m=2oebu0&_p=610268472&cid=988245579.1670062763&ul=en-us&sr=1280x1024&_s=1&sid=1670062762&sct=1&seg=0&dl=https%3A%2F%2Fpaidfromsurveys.com%2Fbest-paid-surveys-in-uae&dt=20%20Best%20Paid%20Surveys%20in%20UAE%20to%20Earn%20Online%20(Free%20to%20Join)&en=page_view&_fv=1&_nsi=1&_ss=1
216.239.32.36204 No Content 0 B URL HTTP/2 region1.google-analytics.com/g/collect?v=2&tid=G-JBM7DJ4MZC>m=2oebu0&_p=610268472&cid=988245579.1670062763&ul=en-us&sr=1280x1024&_s=1&sid=1670062762&sct=1&seg=0&dl=https%3A%2F%2Fpaidfromsurveys.com%2Fbest-paid-surveys-in-uae&dt=20%20Best%20Paid%20Surveys%20in%20UAE%20to%20Earn%20Online%20(Free%20to%20Join)&en=page_view&_fv=1&_nsi=1&_ss=1
IP 216.239.32.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-JBM7DJ4MZC>m=2oebu0&_p=610268472&cid=988245579.1670062763&ul=en-us&sr=1280x1024&_s=1&sid=1670062762&sct=1&seg=0&dl=https%3A%2F%2Fpaidfromsurveys.com%2Fbest-paid-surveys-in-uae&dt=20%20Best%20Paid%20Surveys%20in%20UAE%20to%20Earn%20Online%20(Free%20to%20Join)&en=page_view&_fv=1&_nsi=1&_ss=1 HTTP/1.1
Host: region1.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://paidfromsurveys.com
date: Sat, 03 Dec 2022 10:19:25 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash 53dc59d8781de56802c9bea2d8488c79
c37a81f30aca75a23f4d62a6c5f48fe2aa05039c
9a8fc6eb0f09f8c51009b3d2a59bbfe96d9bdd9baba57c4456fd2b4ecbce61ba
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=138656
Date: Sat, 03 Dec 2022 10:19:25 GMT
Etag: "638a8c0d-1d7"
Expires: Mon, 05 Dec 2022 00:50:21 GMT
Last-Modified: Fri, 02 Dec 2022 23:36:45 GMT
Server: ECS (nyb/1D22)
X-Cache: Miss from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: c7SpY5Mlbt-0IA_8afgTYU4GWX_NSds0g9OUTZLWRkUXUNNYFX9L5Q==
Age: 4416
www.facebook.com/tr/?id=318843375226335&ev=PageView&dl=https%3A%2F%2Fpaidfromsurveys.com%2Fbest-paid-surveys-in-uae&rl=&if=false&ts=1670062763447&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1670062763447.4556899&it=1670062763269&coo=false&rqm=GET
31.13.72.36200 OK 6.9 kB URL HTTP/2 www.facebook.com/tr/?id=318843375226335&ev=PageView&dl=https%3A%2F%2Fpaidfromsurveys.com%2Fbest-paid-surveys-in-uae&rl=&if=false&ts=1670062763447&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1670062763447.4556899&it=1670062763269&coo=false&rqm=GET
IP 31.13.72.36:0
File type gzip compressed data, from Unix\012- data
Hash 9074c4041713525a7d789cde8d23db9a
b3830467bcb391d74d7a6d6fbd0c88bf9460dfd9
61cbde1686b7f40fd563d913fc13819ef228c185c9356620ceaf0a6d1796697c
GET /tr/?id=318843375226335&ev=PageView&dl=https%3A%2F%2Fpaidfromsurveys.com%2Fbest-paid-surveys-in-uae&rl=&if=false&ts=1670062763447&sw=1280&sh=1024&v=2.9.89&r=stable&ec=0&o=28&fbp=fb.1.1670062763447.4556899&it=1670062763269&coo=false&rqm=GET HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/plain
access-control-allow-origin:
access-control-allow-credentials: true
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-length: 0
server: proxygen-bolt
alt-svc: h3=":443"; ma=86400
date: Sat, 03 Dec 2022 10:19:25 GMT
X-Firefox-Spdy: h2
app.convertbox.com/embed/user?uuid=00dfb167-6300-45b0-a360-1d713b171a27
54.209.96.239200 OK 20 B URL HTTP/1.1 app.convertbox.com/embed/user?uuid=00dfb167-6300-45b0-a360-1d713b171a27
IP 54.209.96.239:0
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /embed/user?uuid=00dfb167-6300-45b0-a360-1d713b171a27 HTTP/1.1
Host: app.convertbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, private
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Sat, 03 Dec 2022 10:19:25 GMT
Server: nginx/1.20.0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 20
Connection: keep-alive
app.convertbox.com/mix-manifest.json?1670062764
54.209.96.239200 OK 1.0 kB URL HTTP/1.1 app.convertbox.com/mix-manifest.json?1670062764
IP 54.209.96.239:0
File type JSON data\012- , ASCII text
Hash 6ec83ded7a297ccd96c60e5d5e53267b
bc59caf97f2bc373a7e65a8bdf99fb110327d35a
bc0faa2f47aa6569ac0f769347e7e42c6f85c19f65d31f41a1a570f5f4300c8e
GET /mix-manifest.json?1670062764 HTTP/1.1
Host: app.convertbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Content-Type: application/json
Date: Sat, 03 Dec 2022 10:19:25 GMT
ETag: W/"63884099-f99"
Last-Modified: Thu, 01 Dec 2022 05:50:17 GMT
Server: nginx/1.20.0
Content-Length: 1009
Connection: keep-alive
polyfill.io/v3/polyfill.min.js?flags=gated%7Calways&rum=true&features=Array.prototype.entries%2CArray.prototype.forEach%2CArray.prototype.includes%2CNodeList.prototype.forEach%2CObject.values%2CPromise%2CString.prototype.includes%2CSymbol%2CSymbol.iterator%2CObject.assign%2CArray.from%2CArray.isArray%2CArray.of%2CArray.prototype.findIndex%2CArray.prototype.indexOf%2CArray.prototype.keys%2CArray.prototype.values%2CString.prototype.%40%40iterator%2CArray.prototype.%40%40iterator%2CArray.prototype.find%2CArray.prototype.filter%2CObject.defineProperty%2CObject.defineProperties%2CObject.entries%2CObject.keys
151.101.193.26200 OK 94 B URL HTTP/2 polyfill.io/v3/polyfill.min.js?flags=gated%7Calways&rum=true&features=Array.prototype.entries%2CArray.prototype.forEach%2CArray.prototype.includes%2CNodeList.prototype.forEach%2CObject.values%2CPromise%2CString.prototype.includes%2CSymbol%2CSymbol.iterator%2CObject.assign%2CArray.from%2CArray.isArray%2CArray.of%2CArray.prototype.findIndex%2CArray.prototype.indexOf%2CArray.prototype.keys%2CArray.prototype.values%2CString.prototype.%40%40iterator%2CArray.prototype.%40%40iterator%2CArray.prototype.find%2CArray.prototype.filter%2CObject.defineProperty%2CObject.defineProperties%2CObject.entries%2CObject.keys
IP 151.101.193.26:0
Hash eb8b0ba88b3acfb11ea81d5c02be9108
4b7f14cc2db25abdbe25472934b7469b2488f9d4
7237f15a97fe102c6ed13eadc0f7980da03cd06a20dfb7c7b8050e60dada617d
GET /v3/polyfill.min.js?flags=gated%7Calways&rum=true&features=Array.prototype.entries%2CArray.prototype.forEach%2CArray.prototype.includes%2CNodeList.prototype.forEach%2CObject.values%2CPromise%2CString.prototype.includes%2CSymbol%2CSymbol.iterator%2CObject.assign%2CArray.from%2CArray.isArray%2CArray.of%2CArray.prototype.findIndex%2CArray.prototype.indexOf%2CArray.prototype.keys%2CArray.prototype.values%2CString.prototype.%40%40iterator%2CArray.prototype.%40%40iterator%2CArray.prototype.find%2CArray.prototype.filter%2CObject.defineProperty%2CObject.defineProperties%2CObject.entries%2CObject.keys HTTP/1.1
Host: polyfill.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
cache-control: public, s-maxage=31536000, max-age=604800, stale-while-revalidate=604800, stale-if-error=604800
content-type: text/javascript; charset=utf-8
last-modified: Fri, 18 Nov 2022 10:54:37 GMT
content-encoding: br
age: 0
accept-ranges: bytes
useragent_normaliser: firefox/105.0.0
date: Sat, 03 Dec 2022 10:19:25 GMT
vary: User-Agent, Accept-Encoding
server-timing: cache-bma1640, PASS, fastly;desc="Edge time";dur=13
content-length: 94
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 98fe7e5fd6b778bcdcc63028c3a49fbd
06b34160c344526fbe14ce41445b9fe76c0a878d
d45d898dfe5bf1151557bbbc3be6e6878fbadce386136d60777b4464199173a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.convertbox.com//convertbox/js/embed-core.js?id=51cd32bcecc7671a860a
194.242.11.186200 OK 158 kB URL HTTP/2 cdn.convertbox.com//convertbox/js/embed-core.js?id=51cd32bcecc7671a860a
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
File type Unicode text, UTF-8 text, with very long lines (65509), with no line terminators
Size 158 kB (157456 bytes)
Hash 2ead8c6c5e6dd5746ec236011f6a5bb0
3b1ee858fb76ce7458715efde7e0a91f95508071
83d43cba3f1da425146b54fad2462a2ba81070118f8571d7eae0a75e2965e3a6
GET //convertbox/js/embed-core.js?id=51cd32bcecc7671a860a HTTP/1.1
Host: cdn.convertbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 03 Dec 2022 10:19:25 GMT
content-type: application/javascript; charset=utf-8
server: BunnyCDN-NO1-830
cdn-pullzone: 53020
cdn-uid: 0efa3f5e-1cdb-4f24-96b0-16bfe6c0cf31
cdn-requestcountrycode: NO
vary: Accept-Encoding, Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"62d48ac0-81cb8"
last-modified: Sun, 17 Jul 2022 22:18:40 GMT
cdn-proxyver: 1.02
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 08/14/2022 14:32:23
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 9743d51224e1dc9b619c27e8546498f5
cdn-cache: HIT
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
216.58.207.227200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 28 Nov 2022 18:52:55 GMT
expires: Tue, 28 Nov 2023 18:52:55 GMT
cache-control: public, max-age=31536000
age: 401191
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
app.convertbox.com/embed/box
54.209.96.239200 OK 2.9 kB URL HTTP/1.1 app.convertbox.com/embed/box
IP 54.209.96.239:0
File type ASCII text, with very long lines (14133), with no line terminators
Hash b2248ec0eeaac5211fec84745403d7a1
342052f54adb14aef4c3b6564abb920201db9d0b
f057ebb3e460b30fe45ddde47baba63eb06d7a12e720218a8316f8f19e7c5f1f
POST /embed/box HTTP/1.1
Host: app.convertbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: multipart/form-data; boundary=---------------------------38176622135291760821594017973
Content-Length: 1858
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Cache-Control: no-cache, private
Content-Encoding: gzip
Content-Type: application/json
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: nginx/1.20.0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 2921
Connection: keep-alive
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
216.58.207.227200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:11:08 GMT
expires: Wed, 29 Nov 2023 17:11:08 GMT
cache-control: public, max-age=31536000
age: 320898
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash baaba92c2ccd740f080a25a9ea5cb3ad
3322d5a9fb0b3a2ec83247eac9865234cbcefece
5150dcbc7293378fff4a337fd0f61bdbbf6b4f64bddba6d0fd270be37e81fe07
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 03 Dec 2022 10:19:26 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
paidfromsurveys.com/wp-content/uploads/2021/02/hungary-surveys-flag-small.png
52.86.231.191200 OK 130 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2021/02/hungary-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash f4d4b85ca9ff0df6d0d56f766bc08ea4
a70c4dd772587ed7b6452986e05dfa7b6ebead53
7386b00546b42ef72e9ef85eea3b18e8a6e668dc87a3c3573f713ca59ae2b3df
GET /wp-content/uploads/2021/02/hungary-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Fri, 26 Feb 2021 13:41:35 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 130
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2017/11/india-surveys-flag-small.png
52.86.231.191200 OK 402 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2017/11/india-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 047a0fa64e9adaae09b6c152dcb34362
cf9de1b2dfb629fe9fe11eea9c8a8d9ec3873fa9
60c58b9c2f8fec29a9551ca996dd9e9052e65f845977ee8b91eb64e277715171
GET /wp-content/uploads/2017/11/india-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:16:12 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 402
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2018/12/ireland-survey-sites-flag-small.png
52.86.231.191200 OK 140 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/12/ireland-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash ca74ebfbb6bf7e98a3d5649e8e5096c2
32f441153690c06fcf5be570277a9870e2beb004
148035d7365dee5d60d857c10d07929da8990949fd19449db90f58427fb8f746
GET /wp-content/uploads/2018/12/ireland-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:15:29 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 140
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2019/11/italy-survey-sites-flag-small.png
52.86.231.191200 OK 119 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2019/11/italy-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 972f6201d8b653ad4ec3ccdf0c6f68e3
710149b240898737c59c664444743200d0021e0c
2f60132c89e891fc4201dbb7be0972af627fbe87007274a263588f0d53ac5582
GET /wp-content/uploads/2019/11/italy-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:17:19 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 119
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://paidfromsurveys.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 225932
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
paidfromsurveys.com/wp-content/uploads/2019/01/indonesia-survey-sites-flag-small.png
52.86.231.191200 OK 114 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2019/01/indonesia-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 2-bit colormap, non-interlaced\012- data
Hash 0e893cd483829fb763c249220b0324dc
a9bc89e1f325427b44515819e541fd9c77633253
9c4d7ad67c5c87032815e10e3f5be4c3cf3424605167b95ffa1ac3def735762e
GET /wp-content/uploads/2019/01/indonesia-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:17:08 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 114
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/03/japan-surveys-flag-small.png
52.86.231.191200 OK 216 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/03/japan-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash cfe93c1f6f946ecc3a5d969277eeb58f
3affc5e5429e664de602a0de1adbdb0202df5ffc
571197397c318ade663c56da431a44827a77de4f5d29021972ef172d360494a7
GET /wp-content/uploads/2020/03/japan-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 11:22:46 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 216
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 0aaf3f00cf99e16f7d3a4a8f245a08cd
54f2d98b263c70a3e0148eb55c94e60516e9ae43
f49d02457d96eca7741f20167297ddc6b4ea45d85ec46759e5a398283cd131e6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F49D02457D96ECA7741F20167297DDC6B4EA45D85EC46759E5A398283CD131E6"
Last-Modified: Fri, 02 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8926
Expires: Sat, 03 Dec 2022 12:48:12 GMT
Date: Sat, 03 Dec 2022 10:19:26 GMT
Connection: keep-alive
images.convertbox.com/users/3527/05c8b79193c5ded0450f06a7c4cb0055.jpg
194.242.11.186200 OK 2.8 kB URL HTTP/2 images.convertbox.com/users/3527/05c8b79193c5ded0450f06a7c4cb0055.jpg
IP 194.242.11.186:0
ASN #34989 ServeTheWorld AS
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x50, components 3\012- data
Hash ad8fe4d9d6abf03c27a5f431a8687918
fd594ef36605d5158976a7d210c691eb7c244f8c
f0a66724e10eebccfcb17f0b224f74bca7972ec17f85aa0cc5994f6c2d9f5c44
GET /users/3527/05c8b79193c5ded0450f06a7c4cb0055.jpg HTTP/1.1
Host: images.convertbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 03 Dec 2022 10:19:26 GMT
content-type: image/jpeg
content-length: 2789
server: BunnyCDN-NO1-830
cdn-pullzone: 53026
cdn-uid: 0efa3f5e-1cdb-4f24-96b0-16bfe6c0cf31
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
etag: "ad8fe4d9d6abf03c27a5f431a8687918"
last-modified: Fri, 27 Nov 2020 11:10:46 GMT
x-amz-id-2: F3ZilziSi8ft6fQqk4NFPOUYY9SvGJ+XuVGN3TG8dbc5M44XrH+tOMkTp//iJ32tBOrdit9Embk=
x-amz-request-id: KWK84E01HPE68C65
x-amz-version-id: null
cdn-proxyver: 1.03
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cdn-cachedat: 11/30/2022 23:16:47
cdn-edgestorageid: 830
cdn-status: 200
cdn-requestid: 05e76e23c51a09496cdf906f079fe050
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
paidfromsurveys.com/wp-content/uploads/2018/03/malaysia-survey-sites-flag-small.png
52.86.231.191200 OK 440 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/03/malaysia-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash 501557ccda5fc9b3a7d3b48bf12fdf3b
7a9f64e5909ac60799e4da54bbbdd151bb890859
b1963988016230fa4fe5522c4904f3d28109cb8d7e9b306ca37aa1fed403fbbe
GET /wp-content/uploads/2018/03/malaysia-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:16:01 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 440
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/07/mexico-surveys-flag-small.png
52.86.231.191200 OK 254 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/07/mexico-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash 3f490d2f0a7292f06d4f30741b4bfb54
c20c4b601afd0969f9033365dbf3508b535385bf
436a754578c7ac1fa1e9524505c424c6226634ad238c85989792781407163ed5
GET /wp-content/uploads/2020/07/mexico-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 09:58:00 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 254
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2021/01/morocco-surveys-flag-small.png
52.86.231.191200 OK 169 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2021/01/morocco-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 4024fc4bec778887519dbbcbae140bb5
b00a2182d25f67b0baebc060055838c0cd3dc8d5
accefaecf7fe66f70e52cbb3c3780fe614b5cca89c4021ca9b6fa2aa0955f19f
GET /wp-content/uploads/2021/01/morocco-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 20:52:21 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 169
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2019/07/netherlands-survey-sites-flag-small.png
52.86.231.191200 OK 137 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2019/07/netherlands-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash f60d7995487b4c438f492aba733f902a
122b6336889391f2bb980ee6444c61c217d1020f
ca61c1e3de1810b4e29ca632babe546d23fb8ffb7b7254f913608b6477f55695
GET /wp-content/uploads/2019/07/netherlands-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 21 Apr 2021 12:45:00 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 137
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2019/03/nigeria-survey-sites-flag-small.png
52.86.231.191200 OK 115 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2019/03/nigeria-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 2-bit colormap, non-interlaced\012- data
Hash cc582d000a9d4ba302da6d57debec8cc
7e9f5ec6f3264acf447e3f814d06085a4c3121ce
cc048b20d2557d86853ce78c94bc0edae0232a03a1a882cb16279ce1efcae59b
GET /wp-content/uploads/2019/03/nigeria-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:21:21 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 115
Keep-Alive: timeout=5, max=93
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2018/08/new-zealand-survey-sites-flag-small.png
52.86.231.191200 OK 755 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/08/new-zealand-survey-sites-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash 08d4f4ecb8ecd9855b335db96633a203
4c05dd976980890ce16c9e086c3682b58a7a7ebc
3f376e6a0274c664a96cb48c7fa765c80bb7f9ce4d8c7bbae62533519b80d38c
GET /wp-content/uploads/2018/08/new-zealand-survey-sites-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:15:52 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 755
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/01/norway-surveys-flag-small.png
52.86.231.191200 OK 188 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/01/norway-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 13c5a55bb416b89636d689c16d6af5ba
92c32fc4543e785bb45c529a9584e0d8fc77cc17
31008ddb5f4b822fe50cafadf64b71466e32988df73d340769a9a1e54994fca9
GET /wp-content/uploads/2020/01/norway-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 12:28:47 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 188
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2018/01/philippines-small-flag.png
52.86.231.191200 OK 683 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2018/01/philippines-small-flag.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit/color RGB, non-interlaced\012- data
Hash 57a1cf291a02cc9631de1788d223bb97
5218374236ded146658fb00414bb13223b0b387b
9af0d841c66dfa02a3179ad1fb2c0d8a00d6021a9de0c6c3a56701747e4bac61
GET /wp-content/uploads/2018/01/philippines-small-flag.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Tue, 23 Jun 2020 08:15:15 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 683
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/12/portugal-surveys-flag-small.png
52.86.231.191200 OK 357 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/12/portugal-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 8-bit colormap, non-interlaced\012- data
Hash 25026297e26cf9d54347d65e88c47952
c75bceb2058c0f86cd17d0cd28cf6b78b26aa9c2
1e9a8d654cf12cff44550f34bb1d9ea5123fbf3247aecb2833bbc950d6bdf147
GET /wp-content/uploads/2020/12/portugal-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sat, 17 Apr 2021 20:56:49 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 357
Keep-Alive: timeout=5, max=92
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/11/romania-surveys-flag-small.png
52.86.231.191200 OK 119 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/11/romania-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 4-bit colormap, non-interlaced\012- data
Hash 490bec267cc1ab6bf3436d2cebf5c251
ceac7b5fc19f657e9bd897801525080da29135e7
1084b9c3c02b584e014f865d7c232f40d2c5f6c0b9cebf646fa252bf7badad27
GET /wp-content/uploads/2020/11/romania-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 25 Nov 2020 14:37:51 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 119
Keep-Alive: timeout=5, max=91
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/04/russia-surveys-flag-small.png
52.86.231.191200 OK 123 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/04/russia-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 2-bit colormap, non-interlaced\012- data
Hash 1df7eeb8928b70772205c56b75497af2
5d093ff28d44b28ec774832afafc8649fa4990b5
c0c50561251aa0a34d51cda938bb0b54b9eef5ef0f141e47b31c619ce10173c8
GET /wp-content/uploads/2020/04/russia-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Sun, 18 Apr 2021 11:12:43 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 123
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: image/png
paidfromsurveys.com/wp-content/uploads/2020/09/poland-surveys-flag-small.png
52.86.231.191200 OK 113 B URL HTTP/1.1 paidfromsurveys.com/wp-content/uploads/2020/09/poland-surveys-flag-small.png
IP 52.86.231.191:0
File type PNG image data, 35 x 18, 2-bit colormap, non-interlaced\012- data
Hash 9eab61129eb5409a2a17a659f2479493
e43b0fd17f7cc3775fe2a6832cdf379cb053a0a7
333a78b255781754adca2acad3b0581c7eb7a5e3078e32153ca49e0f58a36d10
GET /wp-content/uploads/2020/09/poland-surveys-flag-small.png HTTP/1.1
Host: paidfromsurveys.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/best-paid-surveys-in-uae
Cookie: _ga_JBM7DJ4MZC=GS1.1.1670062762.1.0.1670062762.0.0.0; _ga=GA1.2.988245579.1670062763; _gid=GA1.2.133655845.1670062763; _gat_gtag_UA_88520514_1=1; _fbp=fb.1.1670062763447.4556899
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Sat, 03 Dec 2022 10:19:26 GMT
Server: Apache/2.4.37 (Debian)
Last-Modified: Wed, 16 Sep 2020 09:10:11 GMT
Accept-Ranges: bytes
Cache-Control: max-age=10368000
Expires: Sun, 02 Apr 2023 10:19:26 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 113
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: image/png
www.youtube.com/iframe_api
216.58.211.14200 OK 0 B URL HTTP/2 www.youtube.com/iframe_api
IP 216.58.211.14:0
GET /iframe_api HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://paidfromsurveys.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
x-content-type-options: nosniff
expires: Sat, 03 Dec 2022 10:19:24 GMT
date: Sat, 03 Dec 2022 10:19:24 GMT
cache-control: private, max-age=0
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=5034K1Jr4Zo; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=fMdAvTErQEE; Domain=.youtube.com; Expires=Thu, 01-Jun-2023 10:19:24 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+725; expires=Mon, 02-Dec-2024 10:19:24 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2