| lifteque.top/js/_rtc.f86a36d7.js |  188.114.97.1 | 200 OK | 5.3 kB |
URL GET HTTP/3lifteque.top/js/_rtc.f86a36d7.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (12222), with no line terminators Hash128d6eec0793a7e02c314d2f6245f260 c9f09311c3f229b770f38d0cc69b422430f1c748 bf1606ac64db254cc565a094e7162a96f31f7e48ddece56fc92c654559e5abb8
GET /js/_rtc.f86a36d7.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-2fbe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TfZb7rQAW8fCSzjLXPFimgvSuqYzB76gGez0mUk0pGeWcZJpr3L73alyISa9IiDW3xdFqSDG3CbDBbyQ2zmlKDk3DdIpIPXEEkua1VDsKHbhUYh3IE1J4wQGh1s3uMw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aaf851b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics |  139.45.197.248 | 200 OK | 0 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:49 GMT
content-length: 0
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| lifteque.top/js/v-utilities.js.d1112fc4.js | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3lifteque.top/js/v-utilities.js.d1112fc4.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2577), with no line terminators Hash18cb151303391373ec2138ce7f10bd7f c3d6fdc026a675d23ac14beebd3a46e3e72e9dc4 93cc28fc75a9cbc865ed918e1a8d139ecf52c3a7d9a2caef63ed7092f69ee142
GET /js/v-utilities.js.d1112fc4.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d3a-a11"
last-modified: Tue, 14 May 2024 08:13:46 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vhyL39SdL8TekdqNCqhGc96wevA2tToNTvD4zIzM0ee7lijYJqJ20e063u2a%2BssG9kQ0hrrihto41nsLF%2BPHLJP%2Bcm1uLvV5AP%2FBJeMeGJ7ObZKyO%2FaaSwsLvUJzyCo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f1b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/_core-survey.1b09882a.js | 188.114.97.1 | 200 OK | 55 kB |
URL GET HTTP/3lifteque.top/js/_core-survey.1b09882a.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (65456) Hashc55db8837cff797e0b71f434711e6c67 9ed9a20f72c6f0177f1e9e8fc297b9a326451f47 83284da23d4d3e338837278b8926ceb145ed8bad7415a96ebe6a16d00c6233f3
GET /js/_core-survey.1b09882a.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-296cc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F%2Bs196aw4%2BfyDlEySL%2BaRb7gLkGJ3HIFm3UMQ6U9gchhzAPK%2BMaGUhVOhqzqNHrr2XE5O47lvqU9lmDcSuwSH0oFO4In6817R1T2VpicpwwLByCtxfR2Evrn2N%2FeNkw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab0865b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| offpichuan.com/track?offer_id=2755&z=4526262&request_var=22&variable2=3e612meklicuv&oaid=pzz7tm6xngocbi5ht1y7fce40bpjswzw | 139.45.197.237 | 200 OK | 182 B |
URL GET HTTP/2offpichuan.com/track?offer_id=2755&z=4526262&request_var=22&variable2=3e612meklicuv&oaid=pzz7tm6xngocbi5ht1y7fce40bpjswzw IP139.45.197.237:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectoffpichuan.com Fingerprint8B:DE:51:B7:81:9E:EA:DE:73:A4:3D:67:F9:5E:6F:7B:F4:D6:77:5A ValidityMon, 15 Apr 2024 21:54:27 GMT - Sun, 14 Jul 2024 21:54:26 GMT
Hash518fbbd5a95951cd6212498955368d69 f6b781a48dee7d09f5b29745c4ced1397642bbe1 f8c19e1cf3423fb386d154c3effb94bc2774d81de6af91588f731e2ce2b6a4f8
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /track?offer_id=2755&z=4526262&request_var=22&variable2=3e612meklicuv&oaid=pzz7tm6xngocbi5ht1y7fce40bpjswzw HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/json
content-length: 182
x-trace-id: e38d4d4e7aa02238b411773ccb785f89
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| lifteque.top/js/v-possibleStandardNamesOptimized.js.205abacb.js | 188.114.97.1 | 200 OK | 3.6 kB |
URL GET HTTP/3lifteque.top/js/v-possibleStandardNamesOptimized.js.205abacb.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (7577), with no line terminators Hash754d15b064e9a8ceb8a31b38b1d81c9a 54ebff161ad4bfdabcff1771c25f945f8b39907e 948a15cf425885066c4d071b20d8920f6439a0e3e6684b200f68db637fdc7f8d
GET /js/v-possibleStandardNamesOptimized.js.205abacb.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:47 GMT
vary: Accept-Encoding
etag: W/"66431d3b-1d99"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8g9i7m%2FZ6%2Bpq6ncElrkL52w994JNI5zXfJu6cjDHqAjGO1IXHmqOH67YWCObTK8vO7bzmmIwX%2BXD6EygBsPC0cAsj8DCkqEJNg4v%2FKmkjvLB8mdi9EbQMBLlirV1Xwg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9eeb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/_each-land-config.e2fae13c.js | 188.114.97.1 | 200 OK | 22 kB |
URL GET HTTP/3lifteque.top/js/_each-land-config.e2fae13c.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (65452) Hash4173eeab3b14ecbfc9ec759912d3bdd9 a0fccd258c3aa1569be01038e77eeb98a96be6b7 7032f71b787614f567cd0c0a803ecf3a67a72a49115e17148617a35ecf882957
GET /js/_each-land-config.e2fae13c.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-11984"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EjfZnbBO5gGShAXWbzFaqQcjJFhtOxQjRsiWClcBd2x27mjupEzv3xfUIQ6ShVKMG5FM0kSg%2B%2FM4lWZof%2F8HPHn2TZ8J7fTh5pjm8GEsp8EKpf5Stc2tioo2wjxUuTQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab085fb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/sweeps-survey.724f05c4.js | 188.114.97.1 | 200 OK | 3.0 kB |
URL GET HTTP/3lifteque.top/js/sweeps-survey.724f05c4.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (5840), with no line terminators Hashafcbdd30c40158232aa9fd35cadd736d 182fca86a5225bb13e7bef3900f162997ee3688a 9f2d46ca99b67007947391db6e07142120b0ed2d0a4746f0ad3f1edc7c75c9e3
GET /js/sweeps-survey.724f05c4.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-16d0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VXJ%2B3vxE%2F3BAP5DHLdE5cxQgd7zACvZaJB3KjXbc9A66ncyN0yZNxV4V5z7PNyRtSV896u0ckKETb3GspKOUGdypJoT%2FtqIXg3BZg4YviUdl0ghvfCQSAx0RWlfqiP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab1867b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/v-domparser.js.97173b2e.js | 188.114.97.1 | 200 OK | 1.6 kB |
URL GET HTTP/3lifteque.top/js/v-domparser.js.97173b2e.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (1720), with no line terminators Hash52ca18eed5d7b4a88f79e075608522fb 8332ab1afc8d9c23d127cbc785fb41af81563732 ce352016d1e917abce6b5552ae2fdc941a8998300566b138d04383ae461f0a9d
GET /js/v-domparser.js.97173b2e.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d39-6b8"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=V%2Fs%2F%2FqxAKLXzfpRBJojDATkA1aoMI4xYNTtEj4s4%2Fe9WeV7VR2XShGgUOeDCGhg2DlrYboClQguzIkM8uK62N0dpoybBk8cOF00eWu2TryesvFjeK42Caxn71KnSo4Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f2b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/v-attributes-to-props.js.a2e7cd04.js | 188.114.97.1 | 200 OK | 1.0 kB |
URL GET HTTP/3lifteque.top/js/v-attributes-to-props.js.a2e7cd04.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (702), with no line terminators Hasheb57bdb06e45aff1918587283bf415aa 27d660f01e5c888c9d38a6f784ee2f4458d7d89f ecdd5f30b2bd16e4aa0274c6fce3d598419837aa257c285f2e6d18ac5df9ce0b
GET /js/v-attributes-to-props.js.a2e7cd04.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:47 GMT
vary: Accept-Encoding
etag: W/"66431d3b-2be"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6foraJGzo%2BWpUzmUiyyasHHKYPa7mrlkMuWv9iVhXiqREsTfkF1SHF%2F6J3em4R2AjGfdow5oHculGBlZI61fSoHu6B%2BUs4uHKvXjoRxcDqs2dIqOVuNiNoSRh3wrFSg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f5b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-5.webp | 188.114.97.1 | 200 OK | 588 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-5.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash25e1107a0e365082ccd6093e0073f05c 7b0d3c741f2bbabbcac99f29bee8cf2f9eaa1841 935ec86b128c0bb7bfafc5915a46c0c3709c47b90509e26e4c994d8ef5587cf2
GET /img/comments/person-sweep-5.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 588
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-24c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9QZ1PjzVzS7lJH0pUeSlKfLt9FU9t9FbjbsuQXS1CTpCuWkOXjhATiDDByP1zKIyYexq3%2B12slpfvc6egEB0gQG9cFTw6gmQ5PhGmwI%2FACa5Zw8%2BRddMrVDLjFtZXOY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeab9b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-4.webp | 188.114.97.1 | 200 OK | 800 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-4.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashb1c95558f71bd6614c52433c225b6a28 7c903c12b48199ac1e1b3c8846baf12693b97a28 8e5987af9fd886b03617f6e4980035a877697b9ccdeb9f002c41baa1d6ee8912
GET /img/comments/person-sweep-4.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 800
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-320"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=abccWxVlP5waSTx%2Fs7FIuvDRGXseEHBJe3Z4H0ldV9DqtTkTS5jSLkmHshX%2F0NHwI2i3%2Fv8QU%2BIlCUrWXJDGx99GdrYrx64M9um3k2Kq7sFoYSvvGb89v%2BJ%2F4SPK%2BG8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeab8b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-6.webp | 188.114.97.1 | 200 OK | 462 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-6.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashdfb961fdb848e75591268fde9c186902 2218e96a5c5081f5bef43fda74fd8f0cbb025003 4cf92de9b24fb1484bc1d97880c20589e113b9b1f065df1963e0648f3a38474d
GET /img/comments/person-sweep-6.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 462
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-1ce"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1YSDk6UvmQ2v5%2FK%2FceTqRulxuzaMoOFts%2FKNKyW4noNx4%2FinHFJh9gbvGvfibubMu%2F6XIgL%2FNfcE7BH2MWlxaW1cqwU73AiBO%2FYhI4GJUV35KvaFGPhO4KBb4HfF0vs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeabbb517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-7.webp | 188.114.97.1 | 200 OK | 610 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-7.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hasheb52e160b8ea5a1e0de8b2453f46d642 4d28311b4ca822a0a74e318c9d1f54def088b509 2e9c67781abf2cfbabb240bfd08ca836658063849f3303b85027203eec1d37c5
GET /img/comments/person-sweep-7.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 610
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-262"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8DOhHflIwQfWpJL0JiyMXjuGiLo7ZnNnPlQRlpsPH8dD8hCOdrjNhk4yLsz533BbsU1%2FqYEChv0iDbR1241HDkKHo8HA7swGBMb1CcNWC7rqL9SFDH%2FBLikhx5hs%2BY8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeabfb517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/config/comments/en-sweep.json | 188.114.97.1 | 200 OK | 1.8 kB |
URL GET HTTP/3lifteque.top/js/config/comments/en-sweep.json IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
Hash34fd116cfd6400f8aa25debb57f73719 10156ab51a9c0f1b1ec1f49c4993dfe25c2c609d 4ba9996bb189c0214098e767af678c6f9ecfc70edd78543b0ecc84e7793303c1
GET /js/config/comments/en-sweep.json HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/json
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-12f9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sNQvtrqGjC%2BIigtV%2F%2Fapiod%2BOmeACIfyUpDN3WNY8gAp%2B4YPefbLrXSM%2BegSZcsdl0jACR6rIMTZK8zeiehjGr9wROAjK49vEtdF9A1hivbomc%2B%2FDVp8iOGU3MkkLxk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ada9e0b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-12.webp | 188.114.97.1 | 200 OK | 668 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-12.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashc57b8a772545ee6e05fedb58c143beb1 6cb5aef79f86275a725cfdd406c7038b24d80aa9 03389ef007f0fd3486a5c71848fd2b67cc05341cf449bcdd34a81a1d4048b090
GET /img/comments/person-sweep-12.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 668
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-29c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v%2FVyZNfjl2OALiOm3MPn4iMiJmJ%2BhL239YPutvnQK2EMMF0fMNBi7MZRF2Yvnkz64mnP2uMliYG5bvxgP64y7u%2BAnJqGWFHf5s0McMBwJJaEtcd1PVzhtpqZeFdpH6o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefacab517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/css/SweepHeader.8e7220ee.css | 188.114.97.1 | 200 OK | 838 B |
URL GET HTTP/3lifteque.top/css/SweepHeader.8e7220ee.css IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (369), with no line terminators Hashb3e63dbf70b8e4ad7c5ec23726112e15 e083def5d026fb5bc171c3043f714fd5d859f82b be1433fba47a27551a04629ff55f1a1d944922016569342433d79f0200d8959d
GET /css/SweepHeader.8e7220ee.css HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=370
etag: W/"66431d39-172"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DUrdB3xrs51BWkfW1UN8%2FvhgHgTpQaTa%2Bi15A%2BvXhwiUrDewnY%2BbhuHdkcQzCQr34Xa30dhUmMkH5Nj5yfPLf78zuWwyFXba1tbYzA76wEjrXIG4iMlSXHRaazWF8m4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ada9e1b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-14.webp | 188.114.97.1 | 200 OK | 626 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-14.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash7c494127025f1ec09a96c16bf0531a36 0c2f9302c41f99da9fb5eead2c364bdbdf435156 e6443a7cdcc5ee11ece88ce10824fd79851700e4bd3dc6259d1a816182b82e5b
GET /img/comments/person-sweep-14.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 626
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-272"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=30ESKc0%2BuGMssuQKnwVbCv1YyMPmm8OFPVO9%2FbDH8xPEw52c76Z%2Byz0k4g6844h0gXNynJqkLCvBzsaKagBIG12UUqYP7pSMiGmRPKwLX8witS4Gg5%2Bnl9KRUHkQnhk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefacfb517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-15.webp | 188.114.97.1 | 200 OK | 576 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-15.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash6c0726564aa84c5f1161bd0051e0c5e0 6df7e7122e0d007e7ea187c3c35fbc869f8ef8e5 98ff0218f67c0bce5c834a0145c686f56d3a7ca1b948341a3181739da66883b2
GET /img/comments/person-sweep-15.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 576
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-240"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2BPEI0I%2FP%2Byb81d2XjR7ZfNSOtNsCHfY77LSvI5bDj91ABqPfonUFff56j5riMf8pUOHk80CAcE764skvT7AsHO0YLsu6KV%2FUb8EJc%2B8aQ48zWDj2OxIw%2FG5zxBlC3U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefad0b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-16.webp | 188.114.97.1 | 200 OK | 734 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-16.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash0e8c55db8fda61ba2565a293b72e36e1 ef9deaad0f8a71da57252bcf543ea369673d39ff 79b1a144ec7d571b7a155cd2852da72e89b2954affca1448001e3fed2227cb34
GET /img/comments/person-sweep-16.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 734
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-2de"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=f0832DxWVXeg%2F9nv3l9x7ejeIZtuHzjHkdHAqmYtYIJcyBebSwHMoLkuNGDzjiOmxuNiiTWU9U9PgGFw2M%2BHxxGvBskRuULnr%2FsJsdaZAmLMzzSpdPv%2F62V04FNBKEk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefad2b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-10.webp | 188.114.97.1 | 200 OK | 572 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-10.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash206819c13484a7a818f1e4499be3704e ada2f34308d6eaa0d004ed0c732e5a3aa7fda1db f4eed862cbcf8f9ce2bde63cf3e13e73ed3e58ac93ec4bb14301b248c4d58e1f
GET /img/comments/person-sweep-10.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:50 GMT
content-type: image/webp
content-length: 572
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-23c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e4IhMISzJKQcD%2BwHyW6%2F%2FWs8DmNm0GI2ZQCuVd0N4Uzk1hjtwADNl6%2B4dJQwa82InUaHz5ATmISXZTzs6zUFVBDDlmIM4zEMjO%2Fu6J4OIcO1BPfTIU7uC72%2FxEqwf3c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefac5b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 0 B |
IP139.45.197.248:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-length: 0
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| lifteque.top/js/v-index.mjs.19622407.js | 188.114.97.1 | 200 OK | 8.0 kB |
URL GET HTTP/3lifteque.top/js/v-index.mjs.19622407.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (35287), with no line terminators Hash1de1ec2d8e7940b88970d8fbce40ed6d 510aa24127fb8bc3578d9ca4628b2eea5a84ce01 b473156bef833bcfb2e84658093f1ebc1e64011dcba904e26ccb31f1cad8b762
GET /js/v-index.mjs.19622407.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-89d7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zn97LPdFZfmJs02%2BhBca39aGOOTiEjIK5k5ewQNHrMKC5ikCyUdNTBFlFbfIfBtnz7ouHrchFZw8dO7uLOiKBSl7nljP%2FI8Klq2s9RxErTwRBWd7BBgfDbIywgvyaME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9eab517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ofklefkian.com/zone?&pub=0&zone_id=6163354&is_mobile=false&domain=lifteque.top&var=4526262&ymid=22&var_3=null&var_4=null&dsig=&tg=1&sw=3.1.472&action=prerequest | 139.45.197.251 | 200 OK | 0 B |
URL POST HTTP/2ofklefkian.com/zone?&pub=0&zone_id=6163354&is_mobile=false&domain=lifteque.top&var=4526262&ymid=22&var_3=null&var_4=null&dsig=&tg=1&sw=3.1.472&action=prerequest IP139.45.197.251:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectofklefkian.com Fingerprint04:A9:FE:8D:C9:B9:EE:6F:3A:C4:29:EA:19:AD:C3:1D:7D:3E:14:02 ValiditySun, 14 Apr 2024 05:38:05 GMT - Sat, 13 Jul 2024 05:38:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /zone?&pub=0&zone_id=6163354&is_mobile=false&domain=lifteque.top&var=4526262&ymid=22&var_3=null&var_4=null&dsig=&tg=1&sw=3.1.472&action=prerequest HTTP/1.1
Host: ofklefkian.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-length: 0
x-trace-id: 31aefdff81a38a23c7b32b7e9d92220f
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 0 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-length: 0
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-do | 139.45.197.248 | 200 OK | 175 B |
IP139.45.197.248:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hasha7fbccd9aed97a405c912f014e54e33d d1f5a4e6a184f566d272fb282c7719dac8da4d38 27abda38a3b61986ba145f4fc9a02407cc4649fb26b3cec1a4bda41b7cba21c3
POST /sync-do HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 153
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-type: application/json; charset=utf-8
content-length: 175
x-trace-id: ff5bcbc307453501e16156534609d475
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 804
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 98a1501d4aaa47b2d48ac2519b4f3c30
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| lifteque.top/img/sweep/tokens10k.png | 188.114.97.1 | 200 OK | 82 kB |
URL GET HTTP/3lifteque.top/img/sweep/tokens10k.png IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typePNG image data, 480 x 500, 8-bit colormap, non-interlaced Hash10337a4976db716ba3b8cad1f0f1f736 788015c74e561249cc5318fc178e564b68bce44d fef211dba7465da86e75019f78dcdf59af496394963b0bc6cc78b02286effe58
GET /img/sweep/tokens10k.png HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:50 GMT
content-type: image/png
content-length: 82163
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-140f3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=skaq2pE1JelrJGFmMd4WpYofj9k2z4A3830U73If%2Fjc7vTJWTbXYWcLVEL%2F0qjwgQsw1ptfWvbHKPJaydq%2BR4gOU1FbjMBwsnctibolZxVoX3yLwcJH7bMeZe6%2BjTd0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5b02b91b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| arleavannya.com/sync-metrics | 139.45.197.248 | 200 OK | 17 B |
URL OPTIONS HTTP/2arleavannya.com/sync-metrics IP139.45.197.248:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectarleavannya.com Fingerprint8A:67:B7:06:5F:61:ED:52:C0:9B:58:C2:64:98:7D:1B:64:03:3F:47 ValidityThu, 18 Apr 2024 17:09:05 GMT - Wed, 17 Jul 2024 17:09:04 GMT
Hash5b64e8b89092b2e3dfd448b10700627f 484b3032619fa1acd135d114565b0a5166281c22 f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: arleavannya.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 2576
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: d772ff5102fb2d201d521ff873c91d5e
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: https://lifteque.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| lifteque.top/js/v-constants.js.49317f47.js | 188.114.97.1 | 200 OK | 8.1 kB |
URL GET HTTP/3lifteque.top/js/v-constants.js.49317f47.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (600), with no line terminators Hash973e735a355fd5b10428c250e8fd7236 bd3fb14c90e2700400c69b15a84e317d52493bd9 16f1d5ca604ad59b9e5b484b1a0cf2d43eebda055ecee80ac847fbcc4437f0b2
GET /js/v-constants.js.49317f47.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-258"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cdwjkSXnBj1Pbnks90xtv7zrmBt7CHOyTXsdftQLXHo5UHyK5MW5XMOKQe9GtNshNkxitoVuuGQ93BEKnFtQ5XcO76LW7lROl7C0Ylb4%2B0EBqFEQm1vWWJk1CA%2BRJCw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f7b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/SweepHeader.b279c2bf.js | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3lifteque.top/js/SweepHeader.b279c2bf.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (1009), with no line terminators Hash0fe439de7df51eacd129903e89a15baa cd04958d3fa581e73b01c27ea41d97d5a430d75f b79bec35661387c45718f5592adf5634587c228d85d45c3b5139bac73214bdf9
GET /js/SweepHeader.b279c2bf.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d3a-3f1"
last-modified: Tue, 14 May 2024 08:13:46 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uHTbGqRqEu1796odvgqhhUTf0gg6r1TTaZIdx74ZNMrjRl4Oyfg3WbT%2Bla0oU2hgi5cS35Cpk2vIbk3OcpAh8pKwgwOBiwihz5dKEE3OzXNoVvpJMdV9iM5sn%2Bg3%2FlE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ada9e3b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/v-html-to-dom.js.ff1ae7e0.js | 188.114.97.1 | 200 OK | 7.4 kB |
URL GET HTTP/3lifteque.top/js/v-html-to-dom.js.ff1ae7e0.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (364), with no line terminators Hashe7384582d95265db33b2a41c0a31f41b b609bec5a8718ab1c9c27a197a15e9a434c36dde c631c08f52c7380fc8f8f0247d68f9171ff8e63d41d7885b992f1374af5a995a
GET /js/v-html-to-dom.js.ff1ae7e0.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d3b-16c"
last-modified: Tue, 14 May 2024 08:13:47 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FSrMa7pcVtwemV8IbtEBElgJH1x1CP21UOLz5YQxqiLjjHQ47mzXDE21KX3q44SU1cG%2FjgqkO%2BPeUyE5LO6stR0mdiWk7h%2BqZGAQHiIneZoUrQhcePqurcgOHXJRWEY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f6b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/SurveyContainer.e2959212.js | 188.114.97.1 | 200 OK | 21 kB |
URL GET HTTP/3lifteque.top/js/SurveyContainer.e2959212.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (57082), with no line terminators Hash0df7a0f05192a1af311ce45d48639a89 df29dce5914578a52af5f516ccd18d289d808951 4cde10689c1ef6c2f58585483fae6d656ccfa1d16cc282dcfbe6cb89700ae2dc
GET /js/SurveyContainer.e2959212.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=57085
etag: W/"66431d3b-defd"
last-modified: Tue, 14 May 2024 08:13:47 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zWawTGNwHv6wteqljkpTv1K%2FN9gjAszj1sQtPWhy0%2FsYS72L2TekAGBvDoq%2BdlsUSrPPJ2GblyfSC1sBnvwiYELnyRfjp%2BVQALB9vGPHryndrHcxmwna81GFMv2n7CU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f8b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-9.webp | 188.114.97.1 | 200 OK | 818 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-9.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hasha61b1f29004e5a54130bc57051a49c0d 7f60eef07e311b3598895343111d90282a002ea0 b3de11ad2ace70aa9786af4a9e65db774466fe25aca16e16dabdfa7ec76b0a53
GET /img/comments/person-sweep-9.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 818
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-332"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9JtEwG%2B9RgPg%2FWzrmVRbQeZid2sIEy7ii7I2%2BYIfHhKxFVhagNQ7bToUut3QodkPzmPg%2BdvAOwxOgsqcC2qYCuOmK6ljyd0Ped9ljGufsj18qp0WKRMjOcgK7ApKWTM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefac2b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| my.rtmark.net/gid.js?userId=pzz7tm6xngocbi5ht1y7fce40bpjswzw | 139.45.195.8 | 200 OK | 65 B |
URL GET HTTP/2my.rtmark.net/gid.js?userId=pzz7tm6xngocbi5ht1y7fce40bpjswzw IP139.45.195.8:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectrtmark.net Fingerprint90:47:5A:A5:5F:5F:FA:E6:7C:6F:AB:D2:06:D1:D9:BD:F3:54:9E:6E ValiditySat, 11 May 2024 20:51:41 GMT - Fri, 09 Aug 2024 20:51:40 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hashc87fae2563c0c723ce48c26ed7d4c964 d0399049d7281ae422201dec3a2a9e0a71740863 3e83a1c074069eec51231baadcbc2333366b6188110237f3b7a94cc20f727a4d
GET /gid.js?userId=pzz7tm6xngocbi5ht1y7fce40bpjswzw HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://lifteque.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; expires=Fri, 23 May 2025 22:57:49 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| lifteque.top/pfe/current/micro.tag.min.js?z=6163354&sw=/sw/sw6163354.js&var=4526262&var_3=null&var_4=null&ymid=22&cdn=1&domain=ofklefkian.com&ab2_ttl=5184000000 | 188.114.97.1 | 200 OK | 27 kB |
URL GET HTTP/3lifteque.top/pfe/current/micro.tag.min.js?z=6163354&sw=/sw/sw6163354.js&var=4526262&var_3=null&var_4=null&ymid=22&cdn=1&domain=ofklefkian.com&ab2_ttl=5184000000 IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (27174), with no line terminators Hash75c26ccd65e96e912725399ff3ce66e9 d300939979d2048844dc5ac80c51ed8121126f4e c9db5c92934b273ad485c58710d6fbc2d580c2923a99bb456b18cb5e1465f5cf
GET /pfe/current/micro.tag.min.js?z=6163354&sw=/sw/sw6163354.js&var=4526262&var_3=null&var_4=null&ymid=22&cdn=1&domain=ofklefkian.com&ab2_ttl=5184000000 HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-6a26"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TvSkdeQ0s8bblA08VQTNNvOoL41J2YMHZ7cvoxkp7q0fhHYIoQyDq8vqPmo7jKgTIACY2eVEmVGnguMGiZkTc7it1d%2BprDzOcE28w5SsSCglkM2hy6zw3OGzlBKUH%2F8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ad99dbb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-11.webp | 188.114.97.1 | 200 OK | 502 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-11.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash7ec874233fc75e1ec8df712b7ebbd7d2 cc219fb2b7e6057a8303283023dd1aa09a082455 9bb6b14a5a503d3c52bc6fc2e7c236a90e7971ceb41cb99e5245fcfc39ef328b
GET /img/comments/person-sweep-11.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 502
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-1f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4jg0Nvv551vRNw9RvitVzL3Ce2cmWdX3W7njp%2BcpLLTL6uil9YCq%2B6YZhoSPZGQKzBoQubJi6auvR0MSuq9I%2BcJ9%2BfTZQXQW654eZ3erSTyU%2BaB2z9pEecGAPoxqrTA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefac8b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv | 188.114.97.1 | 200 OK | 7.9 kB |
URL User Request GET HTTP/2lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv IP188.114.97.1:443
CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeHTML document, ASCII text, with very long lines (8134), with no line terminators Hashbb4cfae76c7f9795f848780f5f757cb5 895d73d4dda24f6f27aaaf67fc8c50b05f8e857b 15fa776e2971a07617c0fafedb30889f3610e7e9ba55f2b8c19bda6b15dab39a
GET /sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 23 May 2024 22:57:48 GMT
content-type: text/html
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZvlydDOzudh2ND1ZaHHTE7XBKevJ6xz8wwi7GekOC5ljSF1oE0tHuKoVaqP25eNHOErurJ3QMkf3N1pdoMWn9hb0IlMSHtgM3jdJrGkc9yoW3pdsuIpB7IEH2LHPtbQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5a82fb1712d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| lifteque.top/js/v-react-dom.production.min.js.c3329619.js | 188.114.97.1 | 200 OK | 129 kB |
URL GET HTTP/3lifteque.top/js/v-react-dom.production.min.js.c3329619.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (65440) Size129 kB (129359 bytes) Hashf5e47be85ac64238a6511377c99bef6b 14202f5ec5092ffcb622a84db5877f1c99493b4c 198b63ec93086fb7042c6052dc6558626c506852de0903547cd1b2d52780839e
GET /js/v-react-dom.production.min.js.c3329619.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-1f94f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WBcgr6EwcldYKrpfqn1ktq67t2GS7G8P55dw2DUTy%2B2TiGdZnRfbSYwB4ZxhNF6AWdYKl%2BneH4VCR%2F2B8sGMUC3UiPir%2BmkQcePnGJdEkKS5tz2ebff2fDJFfinj0fY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab0861b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/v-node.js.28d8082c.js | 188.114.97.1 | 200 OK | 6.3 kB |
URL GET HTTP/3lifteque.top/js/v-node.js.28d8082c.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (6337), with no line terminators Hashb11cf8c1d8d8183e4d11a8f17a41189c 2f912e66ec3992d21e66e7c8e4ff40a2142a4d64 9e69f7af4cfb7fa8b5eb0d67ed8a36f5d23c276ba29b7209565faefab84b71ba
GET /js/v-node.js.28d8082c.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d39-186b"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yejEORlnh6rmekWOaiwjwPuptF4bA88CAv3sGEpkZpOgNTbnQS7Skpk99Bom6jyjRlxBZallA0xBsDlNYfMApDnzt1dc9MgujjB8KKuBjTqEeppnyKGC5d5dlqPOEPU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9ecb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-1.webp | 188.114.97.1 | 200 OK | 862 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-1.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x52, Scaling: [none]x[none], YUV color, decoders should clamp Hash384118eb5e49870ad443d90051c692cb 35a73704dcf55b3232f2e9cfc333ff2ecfdcc19f 1ae21006f04f15e16a8057644615cdf8a8a9b39db706f53ba9a925327a6a1635
GET /img/comments/person-sweep-1.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 862
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-35e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jd4nOoA4OsI1sRbIZYeS6c%2BYIZJcblvRMgjHi45nYLUguN55KzEesoe88ETFMz2psQloxZDwQXpyrj50kYNCUW9BOMIGgQzjTck2PaTXbDE8c6IKlHqgnL0nPtFC%2B7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeab4b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-2.webp | 188.114.97.1 | 200 OK | 538 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-2.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hashe4d97f0d392aca4fa78b0928438d0168 55f713d8826a9a65e11fddf4c5fa4ea5939953b2 7058be64334990621fbc8cc06782aac5116c6e8a6d7700d892cb8b36f06c5866
GET /img/comments/person-sweep-2.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 538
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-21a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=stb1OdPaTqLCZWWMGGNkksgE%2FhHF9JomuOw64cd5Ut7fTRDc0nBh%2FBUQjh9LSP0lX1jMfXEUGCyS%2BqzESurMve51H6tMxd8atTmlrMKRU9z%2BVHQ05yLU3bcvJSYTLM4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeab5b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/s-checkSessionStorageAvailable.ts.e8412d91.js | 188.114.97.1 | 200 OK | 330 B |
URL GET HTTP/3lifteque.top/js/s-checkSessionStorageAvailable.ts.e8412d91.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (338), with no line terminators Hash6eb1ccbb769935debb74de9858287720 5302f94074f05eb22f05368dfe3464b85c89fb48 1e016cce8f09ded837e6e46c9e26d5dddccc19bbfa89c9dc583c04d85e2c7bb4
GET /js/s-checkSessionStorageAvailable.ts.e8412d91.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d39-14a"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CKU8tGlM4pbjljHOe7pjKhKzulwZBS2Q2W98Y7fqgov%2F4%2F7VVtriwriGhDGHcNwR2%2BiIkg0aHj%2Bjnuz6f8Bz7u43z4MX7fVQsqR9fBtCY3r9ZqywmdWSWNekvQo%2FNd0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab0857b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/config/sd/sd-2755-en.js?v=10 | 188.114.97.1 | 200 OK | 6.1 kB |
URL GET HTTP/3lifteque.top/js/config/sd/sd-2755-en.js?v=10 IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (6364), with no line terminators Hash393964f0f170398158701313e2864602 284d16d89faaaff80f695dbbbc6c9263cd2df81c 9c6adc425d55f88c232f92bcd4a9a0a64c2b25741d3aaeceb37e7134e81b39b8
GET /js/config/sd/sd-2755-en.js?v=10 HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:47 GMT
vary: Accept-Encoding
etag: W/"66431d3b-17ec"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UMtZ6GBF0WLVWT7LdSHNqj2RUq7hNVj%2F3qg%2FtSWF8p5%2BVY52fqEIMYABrjRAGAIXhoX%2FWRlVzwLJIqW9H3dc7YwlJIfYvi6FiyDRIei%2BVx94x%2BRtc9ex8AZst%2FyFx7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ac692db517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/v-index.js.da9f7529.js | 188.114.97.1 | 200 OK | 41 kB |
URL GET HTTP/3lifteque.top/js/v-index.js.da9f7529.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (40911) Hashf0c16b073e12930f7cbd321dd6f8f9b9 af74daaab1c8cb17152c3352d40ab89afea0b29d 9058ace69791e8a1eb5f9849c20a6dcd6e0f9018696ed0e563c3da7082aec861
GET /js/v-index.js.da9f7529.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:47 GMT
vary: Accept-Encoding
etag: W/"66431d3b-a01c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8pgXw3Nf%2FZ8z2S%2FIk9hD1fxJnZunbJhd%2FGWwfKlt3dHRO44WTwKf8wmq8TfHrdNtwXtXP59YUdR0gsNKSClLGdU6KP8XCQE5oYORchO%2F8tDDvODXIatl0c9tuJjU0HE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aaf854b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/config/dict/cookie-consent-1.json?v=10 | 188.114.97.1 | 200 OK | 6.8 kB |
URL GET HTTP/3lifteque.top/js/config/dict/cookie-consent-1.json?v=10 IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeHTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators Hash4b2ff958e811a50d2f641818590b443d 6abae297812bb55fad869e953e7fdf7469cbe1ae 9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/json
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GOpY8iF8GEpCiFmyZNpeD1TYI6V06bcG2JfUEE%2B2xMy8gbwHQiokpl8ss5qIEJo19XfyS%2BOunJ532Xk%2B%2FRqEPf4KN1BCJVDIKjmj8GHKITmkwjJCvYWuh6Agqe39sdY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5acb95cb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=88ac930a-c037-4b93-8fe1-f46802ce36d5 | 139.45.195.253 | 200 OK | 12 B |
URL POST HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=88ac930a-c037-4b93-8fe1-f46802ce36d5 IP139.45.195.253:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerSectigo Limited Subjectdatatechonert.com Fingerprint3F:E1:50:2C:9F:FC:F9:37:03:E3:B6:34:00:06:89:69:01:E7:C3:27 ValiditySun, 10 Dec 2023 00:00:00 GMT - Mon, 23 Dec 2024 23:59:59 GMT
File typetroff or preprocessor input, ASCII text, with no line terminators Hash6949f52318584a4b51c719a9b84a7287 9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905 72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a&ruid=88ac930a-c037-4b93-8fe1-f46802ce36d5 HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1451
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 23 May 2024 22:57:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://lifteque.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| lifteque.top/js/v-redux-toolkit.esm.js.fe3487ca.js | 188.114.97.1 | 200 OK | 11 kB |
URL GET HTTP/3lifteque.top/js/v-redux-toolkit.esm.js.fe3487ca.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (11319), with no line terminators Hash5aa3676547abc9a38889c09e69ca968d d19ea919192e86f97c34c0a5959ad05c52299aec 21648e7ba668a077e403b6bd1a38f05d55d987737b959d57e3b3c53787107eb7
GET /js/v-redux-toolkit.esm.js.fe3487ca.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-2c37"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0eNS%2FVc1R2CBsce%2BfKFyBX%2BbS7D6%2Belm1L8mbMZcI1wb40zj%2F48yDkhLFCY2rj9MJEzjSP2I31ydRi2kqQ%2FB1xtQZ7SOfkOEZyvuqd7sgzE0lgvH5EtZkKd3WB90IXM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab085db517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| offpichuan.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5426182&var=4526262&ymid=22&uid=pzz7tm6xngocbi5ht1y7fce40bpjswzw | 139.45.197.237 | 200 OK | 3.6 kB |
URL GET HTTP/2offpichuan.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5426182&var=4526262&ymid=22&uid=pzz7tm6xngocbi5ht1y7fce40bpjswzw IP139.45.197.237:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectoffpichuan.com Fingerprint8B:DE:51:B7:81:9E:EA:DE:73:A4:3D:67:F9:5E:6F:7B:F4:D6:77:5A ValidityMon, 15 Apr 2024 21:54:27 GMT - Sun, 14 Jul 2024 21:54:26 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (3678), with no line terminators Hashbd0b8714b7b6cf06fc48ee92201df341 4de84063a3f187426e47705a35f717d7389bc026 b69838f876631951df5f055d190863b25f90c41c236bbc47a8a1be46f727baca
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5426182&var=4526262&ymid=22&uid=pzz7tm6xngocbi5ht1y7fce40bpjswzw HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://lifteque.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 23 May 2024 22:57:50 GMT
content-type: application/javascript
x-trace-id: 3fe7cfe6415fb3e44d707b3deb5c3735
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://lifteque.top
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; expires=Fri, 23 May 2025 22:57:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| lifteque.top/pfe/current/stattag.js | 188.114.97.1 | 200 OK | 19 kB |
URL GET HTTP/3lifteque.top/pfe/current/stattag.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (19053), with no line terminators Hash3a74216e872211a9c770302bb7d4a63f 7e63556174a7d66eee407218e503ec0aae2c0f9e 03405209d89a927b81d53eb13968663069760776389c5400bb79d11bd9f78f78
GET /pfe/current/stattag.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:50 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:46 GMT
vary: Accept-Encoding
etag: W/"66431d3a-4a6d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r0D%2FuVGjXaiqNRmCX2XkIkDscZ1oGQblJIvRuedtipEwEogk0%2BeRURpPlM5CarS8O5K2Q4dt9vfFkORd0umQ2T5XH6P4F6XLPy%2Be30GLGbitkEemEvSapaobBSIin88%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5afeb62b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-13.webp | 188.114.97.1 | 200 OK | 640 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-13.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash8532ec97225298a9c3ae5e393f62e462 fc26fa010830045fa91a16ac9b8c89c45bb35232 9c45568c99b7782b240341ba6729ecacc59d41a8ced9b9846ca4ac51e50c5320
GET /img/comments/person-sweep-13.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 640
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-280"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F%2FW2Q9doJ8YN%2BFVeyvPrufq0qGTP74fHOmhBxhLJPkez9zWVClrTYtSVcEs1jS5SCGiie%2BjelTSM6TPzUNff3iYNKUbMyvRuF1Xu1jNM3jm2ii7RcPoAkpc7wFSSl5Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aefaccb517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/favicon.ico | 188.114.97.1 | 200 OK | 1.2 kB |
IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel Hash668ba1a9fa1890ba16cb8adc28d3dad8 5e35223b2541265114eaf61b9da2556c812fea17 7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:50 GMT
content-type: image/x-icon
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0up%2BNFWG4f6kqyc3n%2FQR3xc2k8EVNynTqFLI5uV37aVWa35KBpJh2nfP16F4OqQ8e7M6k12ofr0obvK%2FWYobe8QOCG%2FnsE1O9LRDVqcdwYVPADkP3YYkR89vmFDw%2BDM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5b21ca7b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/css/sweeps-survey.f5ae42b0.css | 188.114.97.1 | 200 OK | 94 kB |
URL GET HTTP/3lifteque.top/css/sweeps-survey.f5ae42b0.css IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (65536), with no line terminators Hash895c99e8dc2cac2fe41b6e4623314c0e aa530776c5425e3f15a8ad66ee1bc43840172ac6 bb88f272fbb80a919f86655f6cffff6d8419f09b60e279c9727d904f16d73d9c
GET /css/sweeps-survey.f5ae42b0.css HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=93694
etag: W/"66431d39-16dfe"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SYSUlSoNOaPK25xb%2Br1a7ZxPvYqHgU0jplvnSuf%2Bs8mjOiXFy4HfxJ7RBOhkoitjZt4lkMBHwuayTnscJGQTFpYXox638%2F93OwmCgz7MS3wg2s6l%2BGLFOsKjC6FPCRc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab1869b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-8.webp | 188.114.97.1 | 200 OK | 696 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-8.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash6a6742fef0cd1bd74f6da94e9fb833e1 ccaae2ff48574bbb04072b2efc5864b9177017a5 96bf5ed5aa8149269a215cf19a17889c762b8cddb2fe36229849c8379c2d4aa6
GET /img/comments/person-sweep-8.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 696
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-2b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KOavpB%2BycMRNT2tD9M2kK77aRa8zT7B%2Bsls%2Bkzg1MvlGzkINGVrYdMZqryowLGWZ3kqgQqD7gAYCVW69QNzaqQrT0kYbB1rQ4f8mYwPn9%2F525sF8dgmZO4RGnK9YRiw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeac0b517-OSL
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/s-checkLocalStorageAvailable.ts.f2fef93d.js | 188.114.97.1 | 200 OK | 330 B |
URL GET HTTP/3lifteque.top/js/s-checkLocalStorageAvailable.ts.f2fef93d.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (338), with no line terminators Hash9a78659da737fccc89546e61f0eb6213 84e705584bdbc81715e0326742f426c2f472d3a9 bb46fe2e65cc91e5a01a8e731754fdc9b8f30813835a673bd96b48672ac82d60
GET /js/s-checkLocalStorageAvailable.ts.f2fef93d.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d3a-14a"
last-modified: Tue, 14 May 2024 08:13:46 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gqQCU1gojdKDJ0ONRPkE3%2FvT3fTWLLVFo%2BkUUqUMAWz6CMtKG5AEtph91W%2B%2FSmXCL8lFIjQeWbCf46QZzgkWAyO%2FMYFbN2Y4iFoFUxLDp8sag7%2F%2B6mWENHxn7qDzDCM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab085ab517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/s-storageService.js.bb9f7a22.js | 188.114.97.1 | 200 OK | 2.2 kB |
URL GET HTTP/3lifteque.top/js/s-storageService.js.bb9f7a22.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (2216), with no line terminators Hash803fe057e4762b54a284184815cfb62e e748b6c77988934fe2b458b61a93e35f22cfecbc 0552fbab13dd0597298180b4d1c5e1a8a2ca66e121e3ab892f100366c8d45d3c
GET /js/s-storageService.js.bb9f7a22.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d3a-87a"
last-modified: Tue, 14 May 2024 08:13:46 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5hbHYYqxnkXTO%2B0FrKpQMrcoutQ%2BXaK%2BG3%2BH8H2xhf8n3Op0%2BOTYdEMtSvsBfCBnbAUrJxP0%2FqlFAddVWObgQdYN7p67tMIylIdpHiIjFB3f9dCwBf9%2FGkz8jY6IxZg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aaf855b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/sw/sw6163354.js?var=4526262&var_3=null&var_4=null&ymid=22&ab2_ttl=5184000000 | 188.114.97.1 | 200 OK | 1.3 kB |
URL GET HTTP/3lifteque.top/sw/sw6163354.js?var=4526262&var_3=null&var_4=null&ymid=22&ab2_ttl=5184000000 IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with very long lines (1381), with no line terminators Hash56e24b61a2bdcee6653266001d61811f 72daff35f0c76a0104611b4e1d7b3009ef07aa7d 02d38e897a9a6aa6f918839e1fba3a35956b800ff8e24e172e999ca202506ef7
GET /sw/sw6163354.js?var=4526262&var_3=null&var_4=null&ymid=22&ab2_ttl=5184000000 HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:50 GMT
content-type: application/javascript
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: W/"66431d39-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6JJofROoGiSPgMBQk%2FIpaIPgHDIxKFrlz%2F1QgykhhYGrLapQfx7JtOiNxH9IsAlNbqicARnTIJCui0iBMTx3RQeENi464iMWq0pNXZrdOESBnYvHu%2B8tS%2FMDw7hCGUI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5af8b19b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/css/_core-survey.d3ac2ee0.css | 188.114.97.1 | 200 OK | 83 B |
URL GET HTTP/3lifteque.top/css/_core-survey.d3ac2ee0.css IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeASCII text, with no line terminators Hash30d726a40ffe74d794b282ca1795b44c b43155653a1b9cc8d257687df9a75e0f204db348 4916da6d6e00e0e6681cccaf9107eb45fdfc78fe2e476444623c30a64959b5e4
GET /css/_core-survey.d3ac2ee0.css HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=84
etag: W/"66431d39-54"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vWZZKuvBh9%2BLbKMjGyC1P%2BP%2BU69c7BBvTZDURHH0FvFnUtA1VFpzU%2FCAOe8kZ%2FTV9gdCytjCrAWkLzumeofyZdLQ4rZORiOKnvPi%2BoOHYV0gmZ3%2F3VXlq7wzBoCwH18%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5ab1868b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/js/v-dom-to-react.js.26fdf751.js | 188.114.97.1 | 200 OK | 1.1 kB |
URL GET HTTP/3lifteque.top/js/v-dom-to-react.js.26fdf751.js IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeJavaScript source, ASCII text, with very long lines (1101), with no line terminators Hash5693cb2629dd3231ce6fed788c41b150 872d71cae7dddc37389be6bae0fc4a5b611ec9c0 b312636bf1d349d818517865e89c22f8b9ef9e61d1805cf315e44241ccc05d26
GET /js/v-dom-to-react.js.26fdf751.js HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"66431d39-43d"
last-modified: Tue, 14 May 2024 08:13:45 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dRj49oOb0KTukA6lbOAlYtaYmAGS4CmXhPJHMrCwjO1%2B16bi%2Bo%2FwAj4tvOdF1jumf14Rn1BKsQjCxbDzpY68bPuZTR5y47RXS3w6V3Tmj%2FgyDMy%2B9IPvXJO5HoPQHJk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5adb9f3b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| lifteque.top/img/comments/person-sweep-3.webp | 188.114.97.1 | 200 OK | 582 B |
URL GET HTTP/3lifteque.top/img/comments/person-sweep-3.webp IP188.114.97.1:443
Requested byhttps://lifteque.top/sweeps-survey.html?z=4526262&offer_id=2755&var=22&ymid=3e612meklicuv CertificateIssuerLet's Encrypt Subjectlifteque.top Fingerprint46:51:F7:27:16:B9:30:19:D1:CD:ED:EE:42:CB:5C:66:1B:F5:8D:6A ValidityWed, 27 Mar 2024 15:34:19 GMT - Tue, 25 Jun 2024 15:34:18 GMT
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 50x50, Scaling: [none]x[none], YUV color, decoders should clamp Hash8347ebfbfa18beba17d356a3dbacb100 f1d66a05e07953cea27fe277e72a495a8e3de2e7 318e494a7bcf7cb28173e54feebeb44ba93b4c17a423c7036d2fcac40e4db6cd
GET /img/comments/person-sweep-3.webp HTTP/1.1
Host: lifteque.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=pzz7tm6xngocbi5ht1y7fce40bpjswzw; syncedCookie=true; oaidts=1716505069; ID=pzz7tm6xngocbi5ht1y7fce40bpjswzw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 23 May 2024 22:57:49 GMT
content-type: image/webp
content-length: 582
last-modified: Tue, 14 May 2024 08:13:45 GMT
vary: Accept-Encoding
etag: "66431d39-246"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZsVPBBRSnMkdhBmi89hOqfnQvQNX1wYb041E4%2F6VoIzvsv65UaWQkkKbrnkE4em8pT%2BeO1LyujNtU0s2NB8cLzfHWfwFhYbEJzbdStaPiGAy60XR8NL%2BbAKvkl8fTd4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8888a5aeeab7b517-OSL
alt-svc: h3=":443"; ma=86400
|
|