r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1273d41c84b2b39f78a8033130d00282
556757697b70e019ed502585fcc888e2403f3229
ee3c03cc0a659fbc43d34feaa79a8ad6627b9c525d675956cdb434c1590db89e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EE3C03CC0A659FBC43D34FEAA79A8AD6627B9C525D675956CDB434C1590DB89E"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2841
Expires: Fri, 07 Oct 2022 19:36:13 GMT
Date: Fri, 07 Oct 2022 18:48:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: HWvLOpNvMjWl4aGVbvrhCxzdp1oX4y4gXXJ-7cDTWZBCw5p8pnYJ-w==
Age: 183694
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10535
Expires: Fri, 07 Oct 2022 21:44:27 GMT
Date: Fri, 07 Oct 2022 18:48:52 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: oO0PH8sUQrDpJZmKpsxJ4KAtHfn7DH3J4uCiCAjtI8yfC2LM2jum9iTaFJZhvv9vj4Ga6oJ9O4k=
x-amz-request-id: NBMGVDN6X7JKS2P6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 17:59:16 GMT
age: 2976
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 18:48:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
139.59.49.76/34363?click=pubf441459b213447cd8f935079ae23da50&pubid=d4bf7d0a
302 Found 226 B URL HTTP/1.1 139.59.49.76/34363?click=pubf441459b213447cd8f935079ae23da50&pubid=d4bf7d0a
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with no line terminators
Hash d2ca543e93a5cd41479b3c55538b7eee
51e79f36947de61b2ee76590ba848f686b2361e7
054b2e4a891387faf278c76d23878f1397d4f3011bef3d742df8a98e955621c1
GET /34363?click=pubf441459b213447cd8f935079ae23da50&pubid=d4bf7d0a HTTP/1.1
Host: 139.59.49.76
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
x-powered-by: Express
surrogate-control: no-store
cache-control: no-store, no-cache, must-revalidate, proxy-revalidate
pragma: no-cache
expires: 0
location: https://surf.ueive.com/rc/736006a179?affclick=22J08001852A034363012829xIgcC&pubid=34363
vary: Accept, Accept-Encoding
content-type: text/html; charset=utf-8
content-length: 226
date: Fri, 07 Oct 2022 18:48:52 GMT
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 07 Oct 2022 18:05:28 GMT
Expires: Fri, 07 Oct 2022 18:19:56 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZjgAB0SY3HkQ4MLBZSuzNAfSOmSv3tOlICqkTshS-MVKdX2-zOSMbA==
Age: 2603
ocsp.digicert.com/
200 OK 471 B IP
Hash d6c404502c7987174a84d8f0a3efab23
fc3a3f6d63acab3f659fb3536b65fd8564ec8628
94b5693df873bd923ffbf31f576fff01d2628e5796af4c6b91306a743e27d19b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6560
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 18:48:52 GMT
Last-Modified: Fri, 07 Oct 2022 16:59:32 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
200 OK 14 kB IP
Hash 50bc823434f6bf3adcc559478dd45526
317b1bb759b558921444e816ea0194261a0e38e7
95827f94a83b7eb6d01a1807a6fcaf8ca6697473cd8f107a32cc92c520a4ffca
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 18:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 05 Oct 2022 03:34:03 GMT
Expires: Wed, 12 Oct 2022 03:34:02 GMT
Etag: "3ae4f531cf731240ca5ae6394150818e0a13d34e"
Cache-Control: max-age=376508,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7568d04359f31c06-OSL
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bmZ4YiLDaOGKlCMjMpxFCA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Q14QL35TEy1k9uamZ0M9ZqIxkCk=
track.gositego.live/sl?id=62dfc1354b8cd38db57f7466&pid=930&sub1=pubd417d81611bc46819a43b509f5fe305d&sub2=f0fc7601_34363
302 Found 0 B URL HTTP/2 track.gositego.live/sl?id=62dfc1354b8cd38db57f7466&pid=930&sub1=pubd417d81611bc46819a43b509f5fe305d&sub2=f0fc7601_34363
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=62dfc1354b8cd38db57f7466&pid=930&sub1=pubd417d81611bc46819a43b509f5fe305d&sub2=f0fc7601_34363 HTTP/1.1
Host: track.gositego.live
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://surf.ueive.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 07 Oct 2022 18:48:53 GMT
content-length: 0
location: https://t3.blowingwnd.com/p.php?p=c:8pnojh5wwryg9ycmq&d=61b86bb2caff0c3520644fec&pid=CLICKID&s=SUBID&pid=63407495d4d9950001e9fee1&s=930_f0fc7601_34363
set-cookie: afclick=63407495d4d9950001e9fee1; expires=Sat, 07 Oct 2023 18:48:53 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b37ed1abeedb60a042de58646174ef95
3190164fe2b62abd27295121952d216755ab1579
3700496087847f54cd7dafec9e45fc28530b0e96bf6803e9eda8483dab23da86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3700496087847F54CD7DAFEC9E45FC28530B0E96BF6803E9EDA8483DAB23DA86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13171
Expires: Fri, 07 Oct 2022 22:28:24 GMT
Date: Fri, 07 Oct 2022 18:48:53 GMT
Connection: keep-alive
t3.blowingwnd.com/p.php?p=c:8pnojh5wwryg9ycmq&d=61b86bb2caff0c3520644fec&pid=CLICKID&s=SUBID&pid=63407495d4d9950001e9fee1&s=930_f0fc7601_34363
302 Found 0 B URL HTTP/1.1 t3.blowingwnd.com/p.php?p=c:8pnojh5wwryg9ycmq&d=61b86bb2caff0c3520644fec&pid=CLICKID&s=SUBID&pid=63407495d4d9950001e9fee1&s=930_f0fc7601_34363
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /p.php?p=c:8pnojh5wwryg9ycmq&d=61b86bb2caff0c3520644fec&pid=CLICKID&s=SUBID&pid=63407495d4d9950001e9fee1&s=930_f0fc7601_34363 HTTP/1.1
Host: t3.blowingwnd.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://surf.ueive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Oct 2022 18:48:53 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 1233eww7ws
Raund: 1im
Location: https://22.us.silverwinds.xyz/feed/?link=true&tid=22&subid=22.930_f0fc7601_34363&ref=https%3A%2F%2Fsurf.ueive.com%2F&s1=63407495c1bff567eb781047
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9322aa0e6f385c2e95c98027d8d85b0f
5d1f70e98e6c2824fbe2f3aa0aa4d0910c486236
f82cf6af78f0e6b2567d4cbe7ec709d3792bc4c67ac61459b8ceeb2c8c97fdc2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F82CF6AF78F0E6B2567D4CBE7EC709D3792BC4C67AC61459B8CEEB2C8C97FDC2"
Last-Modified: Thu, 06 Oct 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21599
Expires: Sat, 08 Oct 2022 00:48:53 GMT
Date: Fri, 07 Oct 2022 18:48:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Fri, 07 Oct 2022 20:28:41 GMT
Date: Fri, 07 Oct 2022 18:48:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Fri, 07 Oct 2022 20:28:41 GMT
Date: Fri, 07 Oct 2022 18:48:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Fri, 07 Oct 2022 20:28:41 GMT
Date: Fri, 07 Oct 2022 18:48:54 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5987
Expires: Fri, 07 Oct 2022 20:28:41 GMT
Date: Fri, 07 Oct 2022 18:48:54 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16339989f5c6c229a3dcc0ed1e52032f
a1ea26d6e4eb4a72cc8c87100b40035dab69d285
16703f888ee6f974bb89e1c4c16a75186b31b64130abcd1a3bcd3741159d912c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13437
x-amzn-requestid: ec801fbc-c339-46ce-ac5f-18d064e5ef21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_HdeoAMFyOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-02b52b770e6e76cf52b26e47;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Iesqk_XbGiZE-n3mTa1_1WtlXiyEqz-4qfyt3_609O1eujdLcFu3zA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:01:58 GMT
etag: "a1ea26d6e4eb4a72cc8c87100b40035dab69d285"
content-type: image/jpeg
age: 74816
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4572451a09430ca7a9203f14ddc035ba
46e17c44fba23988d7a9d9832c411ba2810136c3
fa54e73c4b32d8e109504ebcd46e4316de8143f44b7eae20a44ba63d14a6f24b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8445
x-amzn-requestid: 7d295b3b-29d6-4b2e-8314-c9055d1def80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmju5FxwoAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4cc5-3f58c18b1159ad512c60422b;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:46:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: DC1ECXhkAhfdrU8ZyMhhDdwydsq4PQfzzGOPd-REjCkCsDbXQLnLiA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:01:57 GMT
etag: "46e17c44fba23988d7a9d9832c411ba2810136c3"
content-type: image/jpeg
age: 74817
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2ac0ed19ef64f2f765ce7adb2a8fa7c
b6ea582befd01324dd456d59d3f610101dcf910c
d324c9f67b0efc38a935195076488dd0a62f61b893706ecf40ad1f2c5550a7d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11492
x-amzn-requestid: 7ac7e364-5204-4101-87f6-89fbdf3c5cb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_GKSoAMFdkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-4ae692e2617657225c88e5fb;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: jddNzOBqcXe8oUyYEEC82u0w35f4lAdk7Xf4ruu40Ngj2eY-r1Qyww==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
etag: "b6ea582befd01324dd456d59d3f610101dcf910c"
content-type: image/jpeg
age: 75876
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ed3fa86bbe319c9a2f81ff625e677cb0
e3d5210207f6ff922bc28e328285059c19a523a4
5919694bd942a4f25d5b7ffc3f8aee1af6cdb8461d4ba3dba9a2e72cf19164c8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7261
x-amzn-requestid: e1bdf299-b29e-4f58-9c8a-33f5dacdb081
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBELYoAMFfgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-1969b32c6f4f7e5749e7caa0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: V3fTgH8URZ1iWMxWPy49--20mtdJvMK6XTG_aPKk68pvwCxPl8lULw==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 583992e175976bd59a21b4416890271e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
age: 75876
etag: "e3d5210207f6ff922bc28e328285059c19a523a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e30ca5022768294665070cafc9d489c
c6ebf53c21206cfcf8e70279d3ae43f0170ade3a
6b834cdae692318a114c0d82ebff4fa8f4e65526983758e08ffb130d4d86020f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9046
x-amzn-requestid: d560c8ba-6e81-46f7-a451-30c40fbfce6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_F7qIAMFkQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-012e65d675558ec8544a1f30;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: a9tOPCySPRdXpvJf239ycM7_3PJS7GcITvM52Sxic_FwYr_-n2XQHA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:44:18 GMT
etag: "c6ebf53c21206cfcf8e70279d3ae43f0170ade3a"
content-type: image/jpeg
age: 75876
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: iClOZEPMiFmpeprT8McJ2HI0dCmyxkhEdfYr0qP0YK3U_Pcd9N0Fhg==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 b47618c03bd47cf085f27b1e215f76cc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 07 Oct 2022 11:08:01 GMT
age: 27653
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
22.us.silverwinds.xyz/feed/?link=true&tid=22&subid=22.930_f0fc7601_34363&ref=https%3A%2F%2Fsurf.ueive.com%2F&s1=63407495c1bff567eb781047
301 Moved Permanently 0 B URL HTTP/1.1 22.us.silverwinds.xyz/feed/?link=true&tid=22&subid=22.930_f0fc7601_34363&ref=https%3A%2F%2Fsurf.ueive.com%2F&s1=63407495c1bff567eb781047
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /feed/?link=true&tid=22&subid=22.930_f0fc7601_34363&ref=https%3A%2F%2Fsurf.ueive.com%2F&s1=63407495c1bff567eb781047 HTTP/1.1
Host: 22.us.silverwinds.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://surf.ueive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Cache-Control: no-cache
Location: https://redir.findthewind.xyz/click/invalid/?tid=22&subid=22.930_f0fc7601_34363
Date: Fri, 07 Oct 2022 18:48:55 GMT
Connection: keep-alive
Keep-Alive: timeout=5
Transfer-Encoding: chunked
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 2213f62c9eab3c20411f6402f92a460a
6bbc9e1c9984b4e0fdd6c6a0d4ca5c2243a0382b
e130304a90e81881e4c513e0337c88a5fd29ffa9e0caa95a11d33b9f62b364af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E130304A90E81881E4C513E0337C88A5FD29FFA9E0CAA95A11D33B9F62B364AF"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9833
Expires: Fri, 07 Oct 2022 21:32:48 GMT
Date: Fri, 07 Oct 2022 18:48:55 GMT
Connection: keep-alive
redir.findthewind.xyz/click/invalid/?tid=22&subid=22.930_f0fc7601_34363
302 Found 224 B URL HTTP/1.1 redir.findthewind.xyz/click/invalid/?tid=22&subid=22.930_f0fc7601_34363
IP
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with no line terminators
Hash fa33400c0247cc0afd19c69591e6488f
91867589ec56d09ac4ffe8da1bd3bbb9af170c8e
afb91828889ac8ecdf2e69027e2fb53b62ea6b35cfa807fe097d8d7e20538c1b
GET /click/invalid/?tid=22&subid=22.930_f0fc7601_34363 HTTP/1.1
Host: redir.findthewind.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://surf.ueive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Location: https://t4.hightid.com/t.php?p=c:zgefa9wnnlqq0n3_0&d=6336e759cc78db1aa92efff3&s=22
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 224
Date: Fri, 07 Oct 2022 18:48:55 GMT
Connection: keep-alive
Keep-Alive: timeout=5
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b37ed1abeedb60a042de58646174ef95
3190164fe2b62abd27295121952d216755ab1579
3700496087847f54cd7dafec9e45fc28530b0e96bf6803e9eda8483dab23da86
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3700496087847F54CD7DAFEC9E45FC28530B0E96BF6803E9EDA8483DAB23DA86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13168
Expires: Fri, 07 Oct 2022 22:28:24 GMT
Date: Fri, 07 Oct 2022 18:48:56 GMT
Connection: keep-alive
t4.hightid.com/t.php?p=c:zgefa9wnnlqq0n3_0&d=6336e759cc78db1aa92efff3&s=22
302 Found 0 B URL HTTP/1.1 t4.hightid.com/t.php?p=c:zgefa9wnnlqq0n3_0&d=6336e759cc78db1aa92efff3&s=22
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /t.php?p=c:zgefa9wnnlqq0n3_0&d=6336e759cc78db1aa92efff3&s=22 HTTP/1.1
Host: t4.hightid.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://surf.ueive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
Server: nginx
Date: Fri, 07 Oct 2022 18:48:56 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Round: 11l3mda7a9
Raund: 1np
Location: https://track.aditserve.com/sl?id=61b9db328bff280d95069d29&pid=1106&sub1=63407498d3087b327921cdf6&sub2=22
ocsps.ssl.com/
200 OK 1.8 kB IP
Hash a4a081daf3f070ded55a813f45b3fcb8
db26679caf7105799a08b24597f313a251478daf
1b939331abef52b013003d08eb514f3dc4bea157dec17f56ae7b10b7144fc5a5
POST / HTTP/1.1
Host: ocsps.ssl.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 07 Oct 2022 18:48:56 GMT
Content-Type: application/ocsp-response
Content-Length: 1810
Connection: keep-alive
Expires: Fri, 14 Oct 2022 16:01:16 GMT
Cache-Control: max-age=86400,public,no-transform,must-revalidate
ETag: "db26679caf7105799a08b24597f313a251478daf"
Last-Modified: Fri, 07 Oct 2022 16:01:17 GMT
X-Proxy-Cache: HIT
track.aditserve.com/sl?id=61b9db328bff280d95069d29&pid=1106&sub1=63407498d3087b327921cdf6&sub2=22
302 Found 0 B URL HTTP/2 track.aditserve.com/sl?id=61b9db328bff280d95069d29&pid=1106&sub1=63407498d3087b327921cdf6&sub2=22
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=61b9db328bff280d95069d29&pid=1106&sub1=63407498d3087b327921cdf6&sub2=22 HTTP/1.1
Host: track.aditserve.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://surf.ueive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 07 Oct 2022 18:48:56 GMT
content-length: 0
location: https://kixa.jukminung.com/rc/19aff8b744?affclick=63407498cbd3560001b29c16&pubid=1106_22
set-cookie: afclick=63407498cbd3560001b29c16; expires=Sat, 07 Oct 2023 18:48:56 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 11c2c340885f89936d2053021f2e1918
70c765878b32e0fa43ad04e9adf5a3e9bdd994d0
ce40c3910dd092d3164518c5f9b8bfc03cf773b05f57227d74a6072dccabb034
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "CE40C3910DD092D3164518C5F9B8BFC03CF773B05F57227D74A6072DCCABB034"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9674
Expires: Fri, 07 Oct 2022 21:30:10 GMT
Date: Fri, 07 Oct 2022 18:48:56 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 11c2c340885f89936d2053021f2e1918
70c765878b32e0fa43ad04e9adf5a3e9bdd994d0
ce40c3910dd092d3164518c5f9b8bfc03cf773b05f57227d74a6072dccabb034
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "CE40C3910DD092D3164518C5F9B8BFC03CF773B05F57227D74A6072DCCABB034"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9674
Expires: Fri, 07 Oct 2022 21:30:10 GMT
Date: Fri, 07 Oct 2022 18:48:56 GMT
Connection: keep-alive
pantruna.com/?s=1&clientId=169&productId=2194&tracking=pub3210d28813c74acaaa03f7540f1a40c3&pubid=3104d037_1106_22
302 Moved Temporarily 0 B URL HTTP/1.1 pantruna.com/?s=1&clientId=169&productId=2194&tracking=pub3210d28813c74acaaa03f7540f1a40c3&pubid=3104d037_1106_22
IP
ASN #15699 OGIC Informatica S.L.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?s=1&clientId=169&productId=2194&tracking=pub3210d28813c74acaaa03f7540f1a40c3&pubid=3104d037_1106_22 HTTP/1.1
Host: pantruna.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kixa.jukminung.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 07 Oct 2022 18:48:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Origin: *
Set-Cookie: redirect_user_data=%7B%22country%22%3A%22NO%22%2C%22isp%22%3A%22blix+solutions%22%2C%22netspeed%22%3A%22%22%7D; expires=Fri, 07-Oct-2022 18:58:56 GMT; Max-Age=600
_tracker_ikangoo=a%3A5%3A%7Bs%3A4%3A%22_key%22%3Bs%3A7%3A%22IKPANEL%22%3Bs%3A6%3A%22_subid%22%3Bs%3A16%3A%225002102130147465%22%3Bs%3A8%3A%22_country%22%3Bs%3A2%3A%22NO%22%3Bs%3A4%3A%22_isp%22%3Bs%3A14%3A%22blix+solutions%22%3Bs%3A5%3A%22_time%22%3Bi%3A1665168536%3B%7D; expires=Fri, 07-Oct-2022 18:50:56 GMT; Max-Age=120
Location: https://trenhsasolc.com/link?z=5392611&var=169&ymid=5002102130147465
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
X-Content-Type-Options: nosniff
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f23098676f72a30ef92085dd9240d637
29e043be94a15deefb2abb47c8968ff16b177b32
205975de6575b0c45f858ac239d954192ec153b02592f17fe57b203871ff8625
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "205975DE6575B0C45F858AC239D954192EC153B02592F17FE57B203871FF8625"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18952
Expires: Sat, 08 Oct 2022 00:04:49 GMT
Date: Fri, 07 Oct 2022 18:48:57 GMT
Connection: keep-alive
trenhsasolc.com/link?z=5392611&var=169&ymid=5002102130147465
302 Found 0 B URL HTTP/2 trenhsasolc.com/link?z=5392611&var=169&ymid=5002102130147465
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /link?z=5392611&var=169&ymid=5002102130147465 HTTP/1.1
Host: trenhsasolc.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://kixa.jukminung.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 07 Oct 2022 18:48:57 GMT
content-length: 0
location: https://tberjonk.com/link?z=3956710&var=5392611
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 1a644529a3122df95645c228f8dd638f
link: <https://tberjonk.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=a414db8e8547489bba0e5a46d56bf21f; expires=Sat, 07 Oct 2023 18:48:57 GMT
oaidts=1665168537; expires=Sat, 07 Oct 2023 18:48:57 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 65a16c207cfc0fbd213727cd6ba8cd8d
eea1a9284d094654dc34ca05493991149a137bd0
a03c54e7bdeadbcdf4167fb9d94fc874a39d755c6f4e269da9e8a6b4fe371d04
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A03C54E7BDEADBCDF4167FB9D94FC874A39D755C6F4E269DA9E8A6B4FE371D04"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=459
Expires: Fri, 07 Oct 2022 18:56:36 GMT
Date: Fri, 07 Oct 2022 18:48:57 GMT
Connection: keep-alive
tberjonk.com/link?z=3956710&var=5392611
302 Found 0 B URL HTTP/2 tberjonk.com/link?z=3956710&var=5392611
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /link?z=3956710&var=5392611 HTTP/1.1
Host: tberjonk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Fri, 07 Oct 2022 18:48:57 GMT
content-length: 0
location: https://yourtopsurvey180.top/survey.html?offer_id=1916&geo=NO&oaid=e8c701a5e81c4c1992b7057f27db5109&s=602322878651965900&z=3956710&var=5392611&testinapp&autoexit_86400=3953544&abtest=10101
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 988557c587d67d917b5c36562b1fc248
link: <https://yourtopsurvey180.top>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=e8c701a5e81c4c1992b7057f27db5109; expires=Sat, 07 Oct 2023 18:48:57 GMT
oaidts=1665168537; expires=Sat, 07 Oct 2023 18:48:57 GMT
OXCCLK=4105106.1; expires=Sat, 07 Oct 2023 18:48:57 GMT
allcnt=1; expires=Sat, 07 Oct 2023 18:48:57 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c990c0e5da4387246bbc19fbc493bd4b
07a1fffa5c4e4956c3c307434a4875eb4613c015
64890b32e66d975232b0c3ed3569b11ff6dcd7f65c1afaa53961cde30e24534d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "64890B32E66D975232B0C3ED3569B11FF6DCD7F65C1AFAA53961CDE30E24534D"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18645
Expires: Fri, 07 Oct 2022 23:59:42 GMT
Date: Fri, 07 Oct 2022 18:48:57 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash c990c0e5da4387246bbc19fbc493bd4b
07a1fffa5c4e4956c3c307434a4875eb4613c015
64890b32e66d975232b0c3ed3569b11ff6dcd7f65c1afaa53961cde30e24534d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "64890B32E66D975232B0C3ED3569B11FF6DCD7F65C1AFAA53961CDE30E24534D"
Last-Modified: Wed, 05 Oct 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18645
Expires: Fri, 07 Oct 2022 23:59:42 GMT
Date: Fri, 07 Oct 2022 18:48:57 GMT
Connection: keep-alive
yourtopsurvey180.top/survey.html?offer_id=1916&geo=NO&oaid=e8c701a5e81c4c1992b7057f27db5109&s=602322878651965900&z=3956710&var=5392611&testinapp&autoexit_86400=3953544&abtest=10101
200 OK 9.6 kB URL HTTP/2 yourtopsurvey180.top/survey.html?offer_id=1916&geo=NO&oaid=e8c701a5e81c4c1992b7057f27db5109&s=602322878651965900&z=3956710&var=5392611&testinapp&autoexit_86400=3953544&abtest=10101
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2072)
Hash a050fea59853db8f50aeef1263d9f839
ced69c82ee8a7ac06ccd42c9a17083dd0c3c9a98
6309f4aad0f09665d141604bace4dd8734b4fd46b471b756c1fd151d83840613
GET /survey.html?offer_id=1916&geo=NO&oaid=e8c701a5e81c4c1992b7057f27db5109&s=602322878651965900&z=3956710&var=5392611&testinapp&autoexit_86400=3953544&abtest=10101 HTTP/1.1
Host: yourtopsurvey180.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:57 GMT
content-type: text/html
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=19u6nXJtHKBnZ8n%2F%2FBYv23E8vU0xjdOakwJauehKOFqakHgdtwE%2BX2N7fURNT%2BmJv%2BPW2BqU9toTp98nU6oeYOii8xw8zaPj3wY07q4JF7V61LLj%2BICmlkBr3bpXuhVdiREBBfS67w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568d06059a9b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
yourtopsurvey180.top/js/config.js?v=8
200 OK 22 kB URL HTTP/2 yourtopsurvey180.top/js/config.js?v=8
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash b9847de8b678978b0bcaee24b48ac656
f845899cd27281cfb8ac82a357bed622b2031421
b67649c7db5121054dc530668f632476b814d21d3ce5b6578e2e1806a897dad3
Analyzer Verdict Alert fortinet Phishing
GET /js/config.js?v=8 HTTP/1.1
Host: yourtopsurvey180.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63401445-1085d"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 3144
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mi81eBRVNAjktU6PppuvKTNg8mhRBzu10MeIWiAq2Z7UPMhMrtprXy1RYjbAuOYrnCKtsDnHkbI44VI8%2FkNGaIgmvK6sbow5eRCiOVQyyBQzsRvmp0JeanPGTrGVyQggRsgdiZNgzQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568d0610a99b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 18:48:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=516380,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7568d0639c451c06-OSL
my.rtmark.net/gid.js
200 OK 36 kB IP
Hash 000ea9aebce07e5c27cbb75daf91d015
118c3995b06c699028841b0a427e0b668fea5a2d
b651f989c4d39300c6949854d39a91e5d7dbc5b629144d1f40462c3aa57f29c6
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 18:48:58 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=175e67cff8ff4390a071f40606aadd7a; expires=Sat, 07 Oct 2023 18:48:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
200 OK 940 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash b38d3f636e73eb499ac0f68a20f7a6c3
b248bf4c118f9ec7a3c08c8fe2fb2f17041ec533
7ce3e8de5377ec7d1399cc7897b528e148415a6c1d89b7d3d0b7c970a310e3ee
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 18:48:58 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Tue, 11 Oct 2022 16:24:11 GMT
ETag: "b248bf4c118f9ec7a3c08c8fe2fb2f17041ec533"
Last-Modified: Fri, 07 Oct 2022 16:24:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2860
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7568d0654da8b503-OSL
cdntechone.com/stattag.js
200 OK 17 kB URL HTTP/2 cdntechone.com/stattag.js
IP
File type Unicode text, UTF-8 text, with very long lines (43256), with no line terminators
Hash 7631fbb6542b369f714b4408908e5172
0b2791a8a08c0bb62544e0bef1295394221abe0e
fe4b9ea8eff707e85d8517e7965f79210221e59799b98b46411a7ccfcac400d6
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:58 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:17:49 GMT
etag: W/"62ebe31d-a8fa"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3331
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=23dK5449zAPP6JmHYDfioUriarjeg0x9MqOGEPDJSNyNSJeOjYOWh%2FXbgu2%2Bhs08PBfZPIIzaRqNG56wVP0Bur5NBpKzrR3sQ6VrIZBo3d3yWl3xN72jk6gu7ZvlD2TdTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568d063d9f00b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 73 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (731)
Hash 64adf2282f72dc350e916cb82af41ab7
d5c10f65a7ac0cce6eb0c78df805965a9a3ad017
4942011d5f3623476ceff936e757245d89ce2af664558a7031497d370a3d3771
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73219
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: *
etag: "633fab48-11e03"
expires: Fri, 07 Oct 2022 19:48:58 GMT
last-modified: Fri, 07 Oct 2022 07:30:00 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash fb7c213564f3d5b3d1d7ff76b91f78ba
6cdba6ae4c57b17a081f03e8d1c4ea0c8790982e
9a4e59a394d8fe0065332cc2dc6cfaf2989c1d89aa1414c58307cbbe1f95bbf9
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 18:48:58 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 07 Oct 2022 13:33:15 GMT
Expires: Fri, 14 Oct 2022 13:33:14 GMT
Etag: "6cdba6ae4c57b17a081f03e8d1c4ea0c8790982e"
Cache-Control: max-age=585255,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7568d0661ee31c06-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Origin: https://yourtopsurvey180.top
Content-Length: 1736
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 07 Oct 2022 18:48:58 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://yourtopsurvey180.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
mc.yandex.ru/metrika/advert.gif
200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: *
etag: "633fab48-2b"
expires: Fri, 07 Oct 2022 19:48:58 GMT
accept-ranges: bytes
last-modified: Fri, 07 Oct 2022 07:30:00 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 8e0b800d1be322d0f550d1fa57724757
843010f29f07fe8088f0171894420061ee2cad4b
6406b914acd820d3693ecf0bf87bbddbf03f1be822c8293e9432abc3439e69c9
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Fri, 07 Oct 2022 18:48:58 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
yourtopsurvey180.top/js/data/rtc.js?v=1
200 OK 44 kB URL HTTP/2 yourtopsurvey180.top/js/data/rtc.js?v=1
IP
File type ASCII text, with very long lines (10798), with no line terminators
Hash 84349dda64b4cce3be6a207c9ae63229
038734ec76c7083804911c5e8d23545b443d7a6f
00da2d240260bff5ff742aee2dfc322aa036d9fea18de317475a1896b2d08ee1
GET /js/data/rtc.js?v=1 HTTP/1.1
Host: yourtopsurvey180.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:57 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=14949
etag: W/"63401445-3a65"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 3146
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HdIJdCdXBIBdMfOCmTp2qzvO%2B14GCFSSvUcUBKaQLDMfUkgt%2FII4fb1EQ12EHHowOSGCltnrLVOy87DlrDvedwn9%2BnFRRaPZQnXQP0e5jBOg1NBVcfly8ts1ErNkpfvD31Hzurf9oA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568d0610a97b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonAdexLoad&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A971547998%3Arqn%3A6%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonAdexLoad&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A971547998%3Arqn%3A6%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonAdexLoad&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A971547998%3Arqn%3A6%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonStepChange&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A148884042%3Arqn%3A5%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonStepChange&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A148884042%3Arqn%3A5%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonStepChange&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A148884042%3Arqn%3A5%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonAdexCall&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A232650473%3Arqn%3A3%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonAdexCall&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A232650473%3Arqn%3A3%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonAdexCall&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A232650473%3Arqn%3A3%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonUnique&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A843605430%3Arqn%3A4%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonUnique&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A843605430%3Arqn%3A4%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonUnique&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A843605430%3Arqn%3A4%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A399733614%3Arqn%3A7%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A399733614%3Arqn%3A7%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A399733614%3Arqn%3A7%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A379544158%3Arqn%3A8%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A379544158%3Arqn%3A8%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A379544158%3Arqn%3A8%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e6a308313fdf0f4924281259c7208ff5
782d664ec23b342982f506ad05304232a44703ee
11e81606eb8b534a2fcadff9daa52a4907c71ad0a497017548cd5c42f5e73473
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11E81606EB8B534A2FCADFF9DAA52A4907C71AD0A497017548CD5C42F5E73473"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4259
Expires: Fri, 07 Oct 2022 19:59:59 GMT
Date: Fri, 07 Oct 2022 18:49:00 GMT
Connection: keep-alive
laugoust.com/zone?&pub=0&zone_id=4842845&is_mobile=false&domain=yourtopsurvey180.top&var=3956710&ymid=5392611&var_3=602322878651965900&dsig=&action=prerequest
200 OK 1.3 kB URL HTTP/2 laugoust.com/zone?&pub=0&zone_id=4842845&is_mobile=false&domain=yourtopsurvey180.top&var=3956710&ymid=5392611&var_3=602322878651965900&dsig=&action=prerequest
IP
Hash db47ee68516c6be87837786a9f5451c9
a678795bda263d2e9334a01507e7981168f067c2
392236a4ff10f85038b7ca1233a7b3c010bd2a1ed95a8a0965d31e4df83008fd
Analyzer Verdict Alert quad9 Sinkholed
POST /zone?&pub=0&zone_id=4842845&is_mobile=false&domain=yourtopsurvey180.top&var=3956710&ymid=5392611&var_3=602322878651965900&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 18:49:00 GMT
content-length: 0
x-trace-id: b213289ba96d3044f91717cce0057d76
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184900%3Aet%3A1665168541%3Ac%3A1%3Arn%3A608008911%3Arqn%3A9%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168541%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(9)ecs(1)fid(300)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184900%3Aet%3A1665168541%3Ac%3A1%3Arn%3A608008911%3Arqn%3A9%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168541%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(9)ecs(1)fid(300)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184900%3Aet%3A1665168541%3Ac%3A1%3Arn%3A608008911%3Arqn%3A9%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168541%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-7)clc(0-0-0)aw(1)rqnt(9)ecs(1)fid(300)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:49:00 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:49:00 GMT
last-modified: Fri, 07-Oct-2022 18:49:00 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=&zoneId=4842845&checkDuplicate=true&ymid=5392611&var=3956710
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?pub=0&userId=&zoneId=4842845&checkDuplicate=true&ymid=5392611&var=3956710
IP
File type JSON data\012- , ASCII text
Hash 1709e81bc99ed87ffed5eeb4557d9036
9f6ce1bd26f8c64798628b0daa49b016951ba273
c1fc339d3c462ffd72b9895e6c304747ef3e8a2d9c51d95958990b3ec4227567
GET /gid.js?pub=0&userId=&zoneId=4842845&checkDuplicate=true&ymid=5392611&var=3956710 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Cookie: ID=175e67cff8ff4390a071f40606aadd7a
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 18:49:00 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=175e67cff8ff4390a071f40606aadd7a; expires=Sat, 07 Oct 2023 18:49:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
laugoust.com/zone?&pub=0&zone_id=4842845&is_mobile=false&domain=yourtopsurvey180.top&var=3956710&ymid=5392611&var_3=602322878651965900&dsig=&action=settings
200 OK 735 B URL HTTP/2 laugoust.com/zone?&pub=0&zone_id=4842845&is_mobile=false&domain=yourtopsurvey180.top&var=3956710&ymid=5392611&var_3=602322878651965900&dsig=&action=settings
IP
File type JSON data\012- , ASCII text, with very long lines (734)
Hash b656ff26d97686c13c0205a1af890cc3
0461c008aa5c5ef4688b7eddc208152714f64877
9fd768ee56f711d0b042028187a26e7a09499fdbad0fc6972b4dd5b21f2b2a9c
Analyzer Verdict Alert quad9 Sinkholed
GET /zone?&pub=0&zone_id=4842845&is_mobile=false&domain=yourtopsurvey180.top&var=3956710&ymid=5392611&var_3=602322878651965900&dsig=&action=settings HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 18:49:01 GMT
content-type: application/json; charset=utf-8
content-length: 735
x-trace-id: b3cc18bf708ec5be11bac0659d0ecd62
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184900%3Aet%3A1665168541%3Ac%3A1%3Arn%3A21762718%3Arqn%3A10%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168541%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(10)ecs(1)fip(1)rqnl(1)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184900%3Aet%3A1665168541%3Ac%3A1%3Arn%3A21762718%3Arqn%3A10%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168541%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(10)ecs(1)fip(1)rqnl(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fyourtopsurvey180.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665168538_92ea4baab6ebd0decff00a2b944e1e4fc4a0dd3433453c087a4b8187019367fe&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184900%3Aet%3A1665168541%3Ac%3A1%3Arn%3A21762718%3Arqn%3A10%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aeu%3A1%3Ans%3A1665168537806%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168541%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)mc(g-8)clc(0-0-0)aw(1)rqnt(10)ecs(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 84
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 18:49:01 GMT
access-control-allow-origin: https://yourtopsurvey180.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:49:01 GMT
last-modified: Fri, 07-Oct-2022 18:49:01 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0611d96a8a76ee2b104a70372860f979
579dea2edcf3f3fa3e18530d1f254132589a2f6b
70996e9eb0aac2a5befff12fd63c57c5120f59e061af60b60c975694307a6be3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffccc2005-2e35-42eb-8f79-f2155e9eb404.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 8050
x-amzn-requestid: 7332406c-4a06-4c0d-a4c3-d59e089b511d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZJw3jHaooAMF6bQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6333c830-4513d4852dc064a812c23cea;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 04:06:08 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: ytF_TxhiRg0wYUJod7-t0FEv_p7EkIXJNe2rygTGxW6TnebbTy8DCw==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:02 GMT
age: 74459
etag: "579dea2edcf3f3fa3e18530d1f254132589a2f6b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
yourtopsurvey180.top/css/survey.css?v=1
200 OK 0 B URL HTTP/2 yourtopsurvey180.top/css/survey.css?v=1
IP
GET /css/survey.css?v=1 HTTP/1.1
Host: yourtopsurvey180.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19835
etag: W/"63401445-4d7b"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 3148
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z76tv4ESOmr8gKm3H%2BAuBROEIEGU1XDn%2FOFZfZ6LjkTNvFUVRh1WypfPifzYlltnKNA79vrnC3KTqPgLwgB7hxQBjy3uZQ6QA25HXzn63ZxPxtlWP%2Bh4MRGxJ9s8Bb3r8Wxh4spVQw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568d0610a9cb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
surf.ueive.com/rc/736006a179?affclick=22J08001852A034363012829xIgcC&pubid=34363
200 OK 0 B URL HTTP/2 surf.ueive.com/rc/736006a179?affclick=22J08001852A034363012829xIgcC&pubid=34363
IP
GET /rc/736006a179?affclick=22J08001852A034363012829xIgcC&pubid=34363 HTTP/1.1
Host: surf.ueive.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:52 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=woXCS9Ae+949lxLN6/XoB3YJJPgaeQ+4B2lLKUlylj/WEreMt6r7i8SwRfx2bylreF/popEfeNpgCTegs05Ke8U9T7ued0Q/SZt3/PCZua+K+uj7gurrf2bUfIoU; Expires=Fri, 14 Oct 2022 18:48:52 GMT; Path=/
AWSALBCORS=woXCS9Ae+949lxLN6/XoB3YJJPgaeQ+4B2lLKUlylj/WEreMt6r7i8SwRfx2bylreF/popEfeNpgCTegs05Ke8U9T7ued0Q/SZt3/PCZua+K+uj7gurrf2bUfIoU; Expires=Fri, 14 Oct 2022 18:48:52 GMT; Path=/; SameSite=None
vary: Accept-Encoding, Accept-Language, Cookie
content-language: en
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D3xZCuaiHlOK1P84Ze9aMlBImw%2ByKLdvEcFzbLM4lxU0sAE%2FbfcWHzQLTKjoBCUbzmZcL47rE3uxpnz1WMxyUZNSXd6HWPpZNe0LA4EVBa6AVQF0OMOOex%2FqtsASOdxWLQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568d03fda6fb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.addlnk.com/redirect.css
200 OK 0 B URL HTTP/2 cdn.addlnk.com/redirect.css
IP
GET /redirect.css HTTP/1.1
Host: cdn.addlnk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://surf.ueive.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:52 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1680
etag: W/"3ae56d32551602b41f9046c14d1cfde2"
last-modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A=
x-amz-request-id: KYXF7EGSHW20KRRM
cf-cache-status: HIT
age: 5402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BBFMAzedz%2BacvtGVeGrhwlQAeSax%2Ba1PQglVlovYGVzDzsD9TxBg6IYrPZh4edu2pLMmLJOOS9Cvrh%2FrPEB%2FkujP3EFeZu%2BDCNNbFJUCCPmHr%2Bi%2FYqa4NmvekPkQ20VCdg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568d041afec0b51-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
kixa.jukminung.com/rc/19aff8b744?affclick=63407498cbd3560001b29c16&pubid=1106_22
200 OK 0 B URL HTTP/2 kixa.jukminung.com/rc/19aff8b744?affclick=63407498cbd3560001b29c16&pubid=1106_22
IP
GET /rc/19aff8b744?affclick=63407498cbd3560001b29c16&pubid=1106_22 HTTP/1.1
Host: kixa.jukminung.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://surf.ueive.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:56 GMT
content-type: text/html; charset=utf-8
set-cookie: AWSALB=Uy0cDT4EM5UdJ0IcKmBlHoTbdq78XQqGUVfeyHpsBrRnYckrHkihvsXveXdD3XKu7/rRvMBmB94HB0x7FvRe42NzJSybMmJrm6A2gIASdFKrS44uenLgIuomMyRA; Expires=Fri, 14 Oct 2022 18:48:56 GMT; Path=/
AWSALBCORS=Uy0cDT4EM5UdJ0IcKmBlHoTbdq78XQqGUVfeyHpsBrRnYckrHkihvsXveXdD3XKu7/rRvMBmB94HB0x7FvRe42NzJSybMmJrm6A2gIASdFKrS44uenLgIuomMyRA; Expires=Fri, 14 Oct 2022 18:48:56 GMT; Path=/; SameSite=None
vary: Accept-Encoding, Accept-Language, Cookie
content-language: en
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HFoZfsvv9Hl4fMRkiCmJX9DmvZiTTXHVFGYJfL%2F%2BUJXEIVkeWnpi%2FtXyla4dk%2Bktruv%2FNQWudkSe0wDa4IWLVRR7qUHsCfXXXQJ7sMS2iH3nBO%2BtB%2FRKDNswky8yNz35x1wDS%2B8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568d0596a3ab518-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.addlnk.com/redirect.css
200 OK 0 B URL HTTP/2 cdn.addlnk.com/redirect.css
IP
GET /redirect.css HTTP/1.1
Host: cdn.addlnk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://kixa.jukminung.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:56 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=1680
etag: W/"3ae56d32551602b41f9046c14d1cfde2"
last-modified: Wed, 13 Mar 2019 00:03:12 GMT
x-amz-id-2: BUW6rlWHZvzQnvJHp4gBkVRIGc8DfdhWdOpgruWqMqu7ownlHIapox/IYSueiBqz+QseNtzP+2A=
x-amz-request-id: KYXF7EGSHW20KRRM
cf-cache-status: HIT
age: 5406
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zSlyZYZ2PM2JPju0KJPB7Qlj4yIiDMvUQuj%2FCkFmcb2DIhnRlYSkWxQ3uRTt7owcaf2jrjU6o3rxBHWFTidhCTR1P5TFoLUrBVAxKE58tPyLmNaUrGcWJXTEpGaEwYQalg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568d05aaaa8b4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
yourtopsurvey180.top/js/data/_global-config-sd.js?v=3
200 OK 0 B URL HTTP/2 yourtopsurvey180.top/js/data/_global-config-sd.js?v=3
IP
Analyzer Verdict Alert fortinet Phishing
GET /js/data/_global-config-sd.js?v=3 HTTP/1.1
Host: yourtopsurvey180.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Fri, 07 Oct 2022 18:48:57 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=651
etag: W/"63401445-28b"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=1800
cf-cache-status: HIT
age: 3148
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JK9ivHSY0K%2FmhblklzJwEvX1MrSwJ7K4LeTCzZxpxdbIzjym9cHg9PQUu%2Bb9tYMg7mghROjV1%2Bc5a4%2FPpSVAJ5ovmb7sHVI%2Bu%2F6mt3MKNaHBaYcUd6jne%2FhqTF6a6%2Bayio8rn4sVhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568d0610a95b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
302 Found 0 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yourtopsurvey180.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fyourtopsurvey180.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3De8c701a5e81c4c1992b7057f27db5109%26s%3D602322878651965900%26z%3D3956710%26var%3D5392611%26testinapp%3D%26autoexit_86400%3D3953544%26abtest%3D10101%26utm_campaign%3D5392611%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A242%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A387481901002%3Ahid%3A1054265710%3Az%3A0%3Ai%3A20221007184858%3Aet%3A1665168539%3Ac%3A1%3Arn%3A940470369%3Arqn%3A1%3Au%3A1665168539312444145%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C63%2C1%2C%2C0%2C%2C130%2C1%2C%2C%2C%2C320%3Ans%3A1665168537806%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665168539%3At%3AWhich%20Online%20Business%20Would%20Make%20You%20A%20Billionaire%20By%202022%3F&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Fri, 07 Oct 2022 18:48:58 GMT
access-control-allow-origin: https://yourtopsurvey180.top
set-cookie: yandexuid=8201122191665168538; Expires=Sat, 07-Oct-2023 18:48:58 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=8201122191665168538; Expires=Sat, 07-Oct-2023 18:48:58 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1225761001665168538; Path=/; SameSite=None; Secure
i=gld+gxmzJl109GQKpBoPdGDYH/0CJOcCp5twbwUD3Z71iK4uWEA/yGxVblbaoFrL0JPkTPIHbguXSMRoUdI+L+HECM8=; Expires=Mon, 04-Oct-2032 18:48:57 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696704538.yrts.1665168538#1696704538.yrtsi.1665168538; Expires=Sat, 07-Oct-2023 18:48:58 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 18:48:58 GMT
last-modified: Fri, 07-Oct-2022 18:48:58 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
139.59.49.76
104.18.32.68
172.67.149.153
139.45.195.8
51.161.115.163
23.36.77.32
185.32.28.133
34.141.179.97
93.158.134.119