| gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24 |  104.26.14.100 | 301 Moved Permanently | 0 B |
URL HTTP/1.1gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24 IP104.26.14.100:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 04 Oct 2022 08:44:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 04 Oct 2022 09:44:43 GMT
Location: https://gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ad92DLPZnf6wZQFI93JZE7ZlbL%2BGZR1eOHJ6GGRwD8JnQOfctLBhaxbB5QXLU2seadzvb4IuIDj9c14owqPQ6ZEK5JWRJrXv2NyzXT1TmC1dYasZdcQKupsBqNHLOGvTxMq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754ca322fccfb4eb-OSL
alt-svc: h2=":443"; ma=60
|
|
| firefox.settings.services.mozilla.com/v1/ | 143.204.55.36 | 200 OK | 939 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/ IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash2d12f67fe57a87e7366b662d153a5582 d7b02d81cc74f24a251d9363e0f4b0a149264ec1 73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Backoff, Retry-After, Content-Length
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 04 Oct 2022 07:47:04 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: xQ5k-YQI37TewAy2iCeDyMQHBoN9lbBzOQzfHYo6IH8OMWuoPSlwUQ==
Age: 3459
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9955bda9c9ef64bc5700a14af0bae25e 8de7b7469e905af0374bdfcc3006bbb844f13e94 1f611155394fac39439b8ec8217d8cd493d6b588d372d264e0d66c03129c50c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1F611155394FAC39439B8EC8217D8CD493D6B588D372D264E0D66C03129C50C6"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11759
Expires: Tue, 04 Oct 2022 12:00:42 GMT
Date: Tue, 04 Oct 2022 08:44:43 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain | 143.204.55.35 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain IP143.204.55.35:0
File typePEM certificate\012- , ASCII text Hash6113f8408c59aebe188d6af273b90743 7398873bf00f99944eaa77ad3ebc0d43c23dba6b b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 04 Oct 2022 05:28:28 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8s5kcA8tfO3ScmpwED6MiaiI1GJZEKQh75DFxaX3_gVvGNtFn4Ioeg==
age: 11776
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 08:44:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.77.32 | 200 OK | 345 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hasha6807f823ec2329c49c8cbb49a256bf5 9d22419fb3ee1c41d77dd12c01957301aa46b15a 0340dc262182e931260200f3bbadddc9cd07e3fa36776934d07542ba5c953b9f
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "0340DC262182E931260200F3BBADDDC9CD07E3FA36776934D07542BA5C953B9F"
Last-Modified: Tue, 04 Oct 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21551
Expires: Tue, 04 Oct 2022 14:43:54 GMT
Date: Tue, 04 Oct 2022 08:44:43 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 143.204.55.36 | 200 OK | 329 B |
URL HTTP/1.1firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP143.204.55.36:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Tue, 04 Oct 2022 08:29:33 GMT
Expires: Tue, 04 Oct 2022 09:26:52 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UXr6QF1DAIpEAzVrfR1bs7ML1nemYbzBckTO1P12cRLf0G_Aey1q_w==
Age: 911
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash321fa9a78e31dcb66601ac5890bfba73 c325580db79bde6fd00d2d0c7e3f675e4c0046bb 83029b324b4c36522ae47eef9614c124b0ad2994de412d7ea82f990ad8ae9d92
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4111
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 04 Oct 2022 08:44:44 GMT
Last-Modified: Tue, 04 Oct 2022 07:36:13 GMT
Server: ECS (ska/F70F)
X-Cache: HIT
Content-Length: 471
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash0a25532c4133886e22a425cacca9c027 41a1b476967aed6ac227717098cd8be3209b45b3 f50b860d2b3b4d59df90ad6b36c84639141ca9dd9530a74e07fd79fd9387f52e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 08:44:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 03 Oct 2022 06:25:20 GMT
Expires: Mon, 10 Oct 2022 06:25:19 GMT
Etag: "41a1b476967aed6ac227717098cd8be3209b45b3"
Cache-Control: max-age=509434,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754ca3291a5d0b59-OSL
|
|
| my.rtmark.net/gid.js | 139.45.195.8 | 200 OK | 65 B |
IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash6ae4143865bc9994bbd763d4ee02ee0c 538abd38ad7b2b3d3dc0fcc21e7124b9c0b391f0 e0db584462e1178779272d6d6ccdde21ddf2eacb086f5bc9ede7403b7970805d
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f11335f7598649ed96494b687e0b8ee9; expires=Wed, 04 Oct 2023 08:44:44 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash16ae4a1439fab84b7de5fb6dd3ab3e00 b427836040c3809307c11026503dea7d57569463 269ce5b9693351933457fe0bccf9b3be570135cc13e199e35eb158ea4bb62ed2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "269CE5B9693351933457FE0BCCF9B3BE570135CC13E199E35EB158EA4BB62ED2"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7246
Expires: Tue, 04 Oct 2022 10:45:30 GMT
Date: Tue, 04 Oct 2022 08:44:44 GMT
Connection: keep-alive
|
|
| itcleffaom.com/track?offer_id=2755&z=4526262&request_var=4&variable2=388uk8v5pkj24 | 139.45.197.237 | 200 OK | 172 B |
URL HTTP/2itcleffaom.com/track?offer_id=2755&z=4526262&request_var=4&variable2=388uk8v5pkj24 IP139.45.197.237:0
File typeJSON data\012- , ASCII text, with no line terminators Hash9284415133cf54aea3901ecfaeedc0e5 3649c5271ba196cc2d8e13cb48595df3d4a2628f 3a5c242ffaed4bbd028fefa9bd02f7f17bad7c4e6519d9a6eac35b8940817dfe
GET /track?offer_id=2755&z=4526262&request_var=4&variable2=388uk8v5pkj24 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/json
content-length: 172
x-trace-id: 4525664403ba61e6193d1bcf09587de0
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-11.jpg | 104.26.14.100 | 200 OK | 11 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-11.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:32:58], baseline, precision 8, 50x50, components 3\012- data Hashe33f2bea60761c8f1c4cf8648839692a 14a8b54006c419c85842d96a8a4aeb837f5a0a5e 9d020381e094ab0ae1556c751f9c4af6498cf12989cd9c3605ca91b856cb5951
GET /img/comments/person-sweep-11.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 10636
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-298c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pSluQghTex%2BplL37da3I5aHrc2434TBPjTRzrmAoZA6oIN4fqpkyUFBH4%2BbiXwzNzGIYF4aWNmC1oJgdX3G%2F94ICz6SbqHMGXZHIBnBKnEZVKBmd93tGNRzyAf%2BAbdrgHxB1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32afaae0b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-12.jpg | 104.26.14.100 | 200 OK | 11 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-12.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:34:12], baseline, precision 8, 50x50, components 3\012- data Hash85b4e587433a60e7d3e98b1ef93a71f8 c4c8600ce8a5be2640aacbac866bf8b1f8192f26 65e9048c6b09381baa8056de19ad758b2a302dbbc3fb1cdb509e414ed73c69b8
GET /img/comments/person-sweep-12.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 11188
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-2bb4"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rtqUzeNugGm9aPWhmY87AOTwL02xKcZDLc%2F3Mzg5arodTB5W%2BC6tJF6Knj6z2SWi%2BQ%2FuGfA54dhofZ6UwYyviQnwY618XyVBdhx%2FwKSU3zM4E9vAUiullW5O3g9%2B9ZYQu9Di"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32afaaf0b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-15.jpg | 104.26.14.100 | 200 OK | 1.1 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-15.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hashca57a3f68e171ebeb7798679d5fb79ca 688e6a4ffeeae81c9e970e03081de1fe26afac9a f739552ded4074fa25475c5a5ed9c49dc0a769e791e9916b5d8bcbc044f8818a
GET /img/comments/person-sweep-15.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1067
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-42b"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LfjCE03gSgULxohg8c1nZHcY%2BVMLGPOik5S0Un51Igcl1ip%2FUIr6XoT6kf%2Fr2a2uracoZG6KegaWGRKW6VVoJvTrXUyS1Af9aB8X3FiDe%2Fx%2BGjUpLK2vNiezNECXAjwbBOaR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32afab30b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-1.jpg | 104.26.14.100 | 200 OK | 3.9 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-1.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x52, components 3\012- data Hash72c067fe856886245e7c47c7ff84e041 5210cb05f897db334c61f8971ccec9a7396ea8a7 9a106ad9f340c7bafdd365ea1ad24b9336c304b1e72653eb58e84b5604471030
GET /img/comments/person-sweep-1.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 3900
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-f3c"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1PGtfDxt3i1meZfRyhwAC3Gr3FlZupAtMTlizIpkAPuy5R%2BBw0a9R%2FMrbFfX%2Bclni%2FuNC8lxBP8f9ZPtBoaaABpRgZdkXzOpHOUuh0UlRJteTWSE6tEm%2Fr7hq2Dc7IFKJqS6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32ada940b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/pfe/current/micro.tag.min.js?z=4843177&sw=/sw/sw4843177.js&var=4526262&var_3=null&ymid=4&cdn=1&ab2=0&domain=laugoust.com | 104.26.14.100 | 200 OK | 37 kB |
URL HTTP/2gainfulsurvey.top/pfe/current/micro.tag.min.js?z=4843177&sw=/sw/sw4843177.js&var=4526262&var_3=null&ymid=4&cdn=1&ab2=0&domain=laugoust.com IP104.26.14.100:0
File typeASCII text, with very long lines (65536), with no line terminators Hashfe262887c4d94f5c70b0b15fd57b38fc e0df58f9587e358c9d83e89ee3490bd69ef9fdc5 dddda82939c96f2ce7ae369a37cffea40deee0b9c4d3442aa80f9d143b6f2e1e
GET /pfe/current/micro.tag.min.js?z=4843177&sw=/sw/sw4843177.js&var=4526262&var_3=null&ymid=4&cdn=1&ab2=0&domain=laugoust.com HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-1b1f6"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gBtJ4%2FC5wK%2BWb6WyCPzjTEEAbj8tK98VEPkec%2F6rfFi5fB6QAHt40e%2FbeFWmbdGQ8o3chhBIZvnlF7WiwAMFxA4c2ATtdCusTafDhzYNiLXkbtPr0LSrIGLFq8Azj7xyX5Ib"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca32a29b20b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-2.jpg | 104.26.14.100 | 200 OK | 1.0 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-2.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hashe489d022a40ba80f51fb5acc1addea46 41c334f49c248783037ceaf6fc335acff62f760c c39b4bfbcc6aa147547ca922c4f80350b48dbfa59cbd5176f44373e3b20f3567
GET /img/comments/person-sweep-2.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1042
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-412"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HWrvzRSg4zGe%2B61eb65OH3psq9ihOvLjAcX%2BnTFRLYLeWuRdwaAOCA3TRBCCHNQAfEFRq41Xhs9kboEWpwBLVCXu7xUNpFW0WU1bDTkv9kdjS3F4GL8kKlyRDjHDVm40jFi%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32ada970b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-3.jpg | 104.26.14.100 | 200 OK | 1.1 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-3.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hash72ab252d8ff828965ad984b8ab16991f e45ea3665e80feb2e6309b04e1ec2e8d41bb279b c5d70c3abf95aecc84bcc1b1f9fc25848e690852071169bf57522fd671550291
GET /img/comments/person-sweep-3.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1063
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-427"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FTfeZ2srvbBJ2%2B%2FcE8XfbxRTfGyqJGto6gbfBrggePuslgXmgrUR8ny6hq%2BpD5t1JWpK4sLC2XpMNxZxHWy22hy8vhOzGlSnfqkYs%2FF%2FUKUDyjCkQRtwLbZSKM9Ld7VK0fDW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32ada9c0b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-4.jpg | 104.26.14.100 | 200 OK | 3.7 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-4.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data Hash02eebe83bc6786ef27b852477d4c4998 205314ba911137b6f6be4eefd946a2c62229e591 a0038f9d5f6fe1ce8fe1bf1cc7256f05e16c11d27041739c55918b823744753c
GET /img/comments/person-sweep-4.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 3694
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-e6e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SExxw9kkgzxis2nlr%2FxGMsbQ40ZhAOGFY9Zwt165vYmzXNKzz%2Ft8EbjneF7obrhuXPdjh4mRv6Uw39oBft0mU35%2BmPhIpOep9L96lILkW8Ld3fCksdAsfC6s9SI%2FeeFIHDC%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32aea9d0b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/data/sd-2755601.js?v=4 | 104.26.14.100 | 200 OK | 5.1 kB |
URL HTTP/2gainfulsurvey.top/js/data/sd-2755601.js?v=4 IP104.26.14.100:0
Hash0d3495157320322d343cec5bc0b0b358 2d5406a5b096fe913681893bc41058d1de6e622b 0b880259b683346b484d2807d021acf5a97a651145369ceb7c6bb468a2afce80
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /js/data/sd-2755601.js?v=4 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-2416"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wTutgmJuTVZenV5JQD0ph3y9HbDkMunsjE0KxvxbyAuorEnXLd4QwZH0LmR7epKcT%2BTHxPzINwTXvCxAISKbc%2FrO6QLjwjbkbgLhijuSDRbYuuptm%2FEtR2gp2psvr23uLdKV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca3286fc20b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.165.41.15 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.165.41.15:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: oM2CaK0QADnESlFK57dF0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: WE8YS7XS3VpSmL03U6kGfMKNfYA=
|
|
| gainfulsurvey.top/img/comments/person-sweep-6.jpg | 104.26.14.100 | 200 OK | 10 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-6.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:31:13], baseline, precision 8, 50x50, components 3\012- data Hasheecc2c7e1efc1d69f01f47b677666cf2 c4e909b86e22612ca4c5e599c7fc7204573b1baa 92aaaee44b9c6f7f69cd778106927274a9c6f0fec665555be6b020d220207fb6
GET /img/comments/person-sweep-6.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 10400
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-28a0"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cEl2BulR0hh8QFsIBoz2H4HuES6BDz3ML662tM3qmIlRKvgqj7DIfJ%2BfYqRiV2N1Rr1uDmqO2giQlDEztx9Gu1UIIia%2BL9F%2BSLMV%2BJHv2GdkKQRVZ5WhjYYjyeMs50JL8HS2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32aeaa40b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/dict/cookie-consent-1.json?v=1 | 104.26.14.100 | 200 OK | 13 kB |
URL HTTP/2gainfulsurvey.top/js/dict/cookie-consent-1.json?v=1 IP104.26.14.100:0
File typeJSON data\012- HTML document, Unicode text, UTF-8 text Hash904fe1517bb0e0ed16106f132d3b402a 37e70741af8a57843092a22bd152fc3c6f8a4232 dcade19ca6b69c10ccfbd147c6f3ffd9ce07931f993127a0397d38192afa3d07
GET /js/dict/cookie-consent-1.json?v=1 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/json
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-168d"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=W7OIlLy50CF2mDHImGSk6r9tl7%2Fivv9Nqocn0yU1iNJPURksdn40Tw5drZiaTfYItam42ZImhyfa5WqcUa9EawPMyyzjThBa%2F%2B%2F16ryWR7FjNObm9s5jj3wjm3sVhA2e3dUa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca3287fcb0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/css/survey.css?v=1 | 104.26.14.100 | 200 OK | 16 kB |
URL HTTP/2gainfulsurvey.top/css/survey.css?v=1 IP104.26.14.100:0
File typeASCII text, with very long lines (19834) Hash4772c82d49389e3d26ff38a6dec040b8 7bd8c41289815aa44adea2cb53310d3e56540074 ccd7c3034e57746a797f0c301d039ab5907230cf8ed177630923a1e4f6d6f333
GET /css/survey.css?v=1 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: text/css
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-4d7b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IXJAzO9Shkre5x5kO0stKbmRU7NWQXY7Br26pMYz5uyXew42rRKHJe6ycGkczNdOBc0M2SOpqbSaNTQCDMc6mYBXxqmKcqKoyU51A3sR8ugAXqkZ2SlkubltzOzKmNu0Thgd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca326fe410b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/sweep.js?v=4 | 104.26.14.100 | 200 OK | 11 kB |
URL HTTP/2gainfulsurvey.top/js/sweep.js?v=4 IP104.26.14.100:0
File typeASCII text, with no line terminators Hash6dd11118e6b2ff8649cc151a28277ffe 4486bbca9be12c19d6c859004efb367cb6b757ae 2245329bebd52718d6ef2705f013d242f8f62095476ffe4ff57146a75c4ca5c3
GET /js/sweep.js?v=4 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: W/"633acffa-90"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U%2FCTcAFKQTqn9kDtcqIFzfDp6fXT9Eez3tk5zVw2T3ngY6zPrT68S5RDGJspJ99oa8I0aFie%2FzONPj1KBh2IdXh2hG9XmdsUeHw%2FpY0njBw1cLjIDfZC%2B1IhH9AyTPBOh8Vc"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca3270e450b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-8.jpg | 104.26.14.100 | 200 OK | 1.2 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-8.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hashf60b9c2d018d7a29d014742ae8e36839 1b59e7eec38eb9f620256742f83ae7938ac0bb07 ed7ea3a5c85d0ba010c783b9599441ba28fb4333cf1ef534f6ec07b5d81e7fd8
GET /img/comments/person-sweep-8.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1182
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-49e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01BZeD%2FnDiusTWAx90yScgCVlgrQys7G7tspPQdLAthI%2B4EpsSwMTRemhM2sEQmA5wY7qXimgeq%2BQs3cdMGBZaJHPB8acInfJ8p%2FuJRTFMRQALG22wXcAQtHDzzYR62Rt2uD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32aeaa80b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-13.jpg | 104.26.14.100 | 200 OK | 1.1 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-13.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hash85059de53011f0ef712a5f4b5dd13219 481385e3fe4b3ec1fd703de246796396a33777b1 7f442be1fc6ab7aa64035207cedeff057625371b7a58d551fda451acee6b4f58
GET /img/comments/person-sweep-13.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1110
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-456"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zjQsfXwO1PDfjsDs%2FhwaJV85ncCzZMJgBjdQ%2FCxCY%2BIv3%2FjYey0hCODFmUjbF%2FxM9W58ZRaEJMbDbEPsto2ykgTKIx6zxJ6%2Bj%2FMsw46vlEmQ%2BR2FqYBywo3WGkv16Kp4Vnre"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32afab00b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-16.jpg | 104.26.14.100 | 200 OK | 1.2 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-16.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hash9574e9e3f629fc4cc0f470f678a232ca 89412a05077b4eaa423f7790bd5fb4ee3efc84eb 15f660e8aec56d65e9da4efcd552984e5a623c25b8484c3efbdfa7567bdab17d
GET /img/comments/person-sweep-16.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1208
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-4b8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FhMz%2Bf5w7IaaPMfFIlpIMMctg0v5PbmAKMV9dAqJnx%2F%2BN0dAOU9bydB74UGHTohMmKqnDf7FSMd%2Fpi9EEsLLdylZoSy%2F3pCY9wThnfsIb5K2glONdxljoxnhqDnJsLzgH0qS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32afab60b39-OSL
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/img/comments/person-sweep-14.jpg | 104.26.14.100 | 200 OK | 1.1 kB |
URL HTTP/2gainfulsurvey.top/img/comments/person-sweep-14.jpg IP104.26.14.100:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data Hash4248fa5ac54e7b0dfa5a791bd1dbd161 aa880bfbdca2ec69d93fd29606a64bdce6ee830c 174659ceb240363f2d31a6fd392f108ad714a592b0dc3192d1051c42237bf8b8
GET /img/comments/person-sweep-14.jpg HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/jpeg
content-length: 1146
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-47a"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sj%2B29jFlC8x%2BwGm6JZ8wZnAM6WnWpeNLLNzrxyNR0Q6QVhk29cWlmyhqCURWX7UsfFYNRuu4YFZE60HWTQtu29y2%2F%2BtKkLX%2Bgut1o5H35A3Ty5QwVPZefibVCacH51uSOvTr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32afab10b39-OSL
X-Firefox-Spdy: h2
|
|
| ocsp.globalsign.com/gseccovsslca2018 |  104.18.20.226 | 200 OK | 939 B |
URL HTTP/1.1ocsp.globalsign.com/gseccovsslca2018 IP104.18.20.226:0
Hash2a52e610b96389b6dd5852fd6767232a acb68655212b24f4fd533c082e6351dfa7ae1cea b6a2e5679f5cf237c37ca20b58fc7b7f6a02db50b5e4b2ad6efc280009274355
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 08:44:44 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 08 Oct 2022 04:14:25 GMT
ETag: "acb68655212b24f4fd533c082e6351dfa7ae1cea"
Last-Modified: Tue, 04 Oct 2022 04:14:26 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 3007
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 754ca32c1f6b0b55-OSL
|
|
| gainfulsurvey.top/img/sweep/tokens10k.png | 104.26.14.100 | 200 OK | 67 kB |
URL HTTP/2gainfulsurvey.top/img/sweep/tokens10k.png IP104.26.14.100:0
File typePNG image data, 480 x 500, 8-bit colormap, non-interlaced\012- data Hash7226e7c7102de83aea128e7417e87779 1777a0c66bd17c26c4da8462efa8975342581a4d 2cb3f101f3327f07baf3bcd509372a6058d871da12ae0661771a5c7c339fff36
GET /img/sweep/tokens10k.png HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/png
content-length: 66622
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: "633acffa-1043e"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P1j%2BWKJo8b2stcx%2BVxb8X6A4%2B1nDSlEpOJrrVh%2B4sXD%2FZgnxiGFvMASs7hvQ48vYvXH4XRSVfw2GPWLqttr7jdAS241I3aSi6snjUXluaSMTWRsLZlu9KVyrTGAcxbCXVa5P"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32bcb9a0b39-OSL
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/metrika/tag.js |  93.158.134.119 | 200 OK | 72 kB |
URL HTTP/2mc.yandex.ru/metrika/tag.js IP93.158.134.119:0
File typeUnicode text, UTF-8 (with BOM) text, with very long lines (593) Hash7a68c8644032413981e4ba5bc0d66c4a 2d46ca8055e8577ae7138140e34a6e633434973c e0573e9a9cbfc3f00a921fa64c50270f5941a1ebb253ab70af2cc0dac45cb0d5
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 72341
date: Tue, 04 Oct 2022 08:44:44 GMT
access-control-allow-origin: *
etag: "633583ac-11a95"
expires: Tue, 04 Oct 2022 09:44:44 GMT
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash778dfc33f849d577a1524dedb80c7f7c deac9620fc086de0c067b75a9e8a126541e9a49c 8ce029c54d83e3d820ca20ea26fdb2c2b78ae4f288c9e39465af4409f0b6242f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 04 Oct 2022 08:44:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 04 Oct 2022 01:33:17 GMT
Expires: Tue, 11 Oct 2022 01:33:16 GMT
Etag: "deac9620fc086de0c067b75a9e8a126541e9a49c"
Cache-Control: max-age=578310,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 754ca32d5e1d0b59-OSL
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a | 139.45.195.253 | 200 OK | 12 B |
URL HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a IP139.45.195.253:0
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Origin: https://gainfulsurvey.top
Content-Length: 1628
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 04 Oct 2022 08:44:45 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://gainfulsurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| mc.yandex.ru/metrika/advert.gif | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: *
etag: "633583ac-2b"
expires: Tue, 04 Oct 2022 09:44:45 GMT
accept-ranges: bytes
last-modified: Thu, 29 Sep 2022 14:38:20 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A260%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A890833596%3Arqn%3A1%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C62%2C1%2C%2C0%2C%2C85%2C1%2C%2C%2C%2C311%3Ans%3A1664873083712%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 302 Found | 400 B |
URL HTTP/2mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A260%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A890833596%3Arqn%3A1%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C62%2C1%2C%2C0%2C%2C85%2C1%2C%2C%2C%2C311%3Ans%3A1664873083712%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeJSON data\012- , ASCII text, with very long lines (400), with no line terminators Hash8e4c312342f88f9a9c11bb7e7fd96753 16fe5be6cc0904f258252f22e6bc2ea95342ffbc 2e7b9bf2efeaf8fd0968cc559e9e3e75716eb5d0963319f133c1959d91166e1b
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A260%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A890833596%3Arqn%3A1%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C62%2C1%2C%2C0%2C%2C85%2C1%2C%2C%2C%2C311%3Ans%3A1664873083712%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afp%3A260%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A890833596%3Arqn%3A1%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C62%2C1%2C%2C0%2C%2C85%2C1%2C%2C%2C%2C311%3Ans%3A1664873083712%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
set-cookie: yandexuid=932935091664873085; Expires=Wed, 04-Oct-2023 08:44:45 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=932935091664873085; Expires=Wed, 04-Oct-2023 08:44:45 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=866481611664873085; Path=/; SameSite=None; Secure
i=roTIRZg1AQqSpmJyRBNhYsT2rwPjVjTsNTpAY6FZiFJmCd5fZg9Ck0Myh19C3IlD8bhV95csJg9UOLw9WErUDANehb8=; Expires=Fri, 01-Oct-2032 08:44:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696409085.yrts.1664873085#1696409085.yrtsi.1664873085; Expires=Wed, 04-Oct-2023 08:44:45 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonUnique&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A1011450378%3Arqn%3A3%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonUnique&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A1011450378%3Arqn%3A3%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonUnique&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A1011450378%3Arqn%3A3%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonSurveyStart&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A287330255%3Arqn%3A2%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C940%2C940%2C0%2C%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonSurveyStart&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A287330255%3Arqn%3A2%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C940%2C940%2C0%2C%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonSurveyStart&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A287330255%3Arqn%3A2%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C940%2C940%2C0%2C%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 77
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonAdexCall&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A834933189%3Arqn%3A6%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonAdexCall&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A834933189%3Arqn%3A6%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonAdexCall&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A834933189%3Arqn%3A6%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(6)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A725293687%3Arqn%3A5%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A725293687%3Arqn%3A5%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonNotificationPermission&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A725293687%3Arqn%3A5%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonStepChange&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A300204781%3Arqn%3A4%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonStepChange&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A300204781%3Arqn%3A4%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonStepChange&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A300204781%3Arqn%3A4%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonAdexLoad&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A398460713%3Arqn%3A9%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonAdexLoad&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A398460713%3Arqn%3A9%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonAdexLoad&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A398460713%3Arqn%3A9%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(9)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A450171387%3Arqn%3A8%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A450171387%3Arqn%3A8%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonGetIppRotate&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A450171387%3Arqn%3A8%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(8)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 165
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonTrackImpression&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A464656331%3Arqn%3A7%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonTrackImpression&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A464656331%3Arqn%3A7%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonTrackImpression&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A464656331%3Arqn%3A7%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 190
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A135515709%3Arqn%3A10%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2) | 93.158.134.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A135515709%3Arqn%3A10%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2) IP93.158.134.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fgainfulsurvey.top%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fgainfulsurvey.top%2Fsweeps-survey.html%3Fz%3D4526262%26offer_id%3D2755%26var%3D4%26ymid%3D388uk8v5pkj24%26utm_campaign%3D4%26utm_medium%3D4526262%26utm_content%3Dzd_public_v2&charset=utf-8&hittoken=1664873085_71c0110579a61bfe4aed307d06d0882d2f4479d7f3e103369c2b6a9719b4868f&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Aat6op7b9z7b01ildsv2t4%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A904%3Acn%3A1%3Adp%3A0%3Als%3A722014164393%3Ahid%3A536222074%3Az%3A0%3Ai%3A20221004084444%3Aet%3A1664873085%3Ac%3A1%3Arn%3A135515709%3Arqn%3A10%3Au%3A1664873085377820014%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1664873083712%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1664873085%3At%3ADear%20user&t=gdpr(14)mc(g-9)clc(0-0-0)aw(1)rqnt(10)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Tue, 04 Oct 2022 08:44:45 GMT
access-control-allow-origin: https://gainfulsurvey.top
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Tue, 04-Oct-2022 08:44:45 GMT
last-modified: Tue, 04-Oct-2022 08:44:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashff433c9569a3557d806b1480aeafece9 20bbd46383b85326837f45290ff87df708b3b310 e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18833
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 08:44:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashff433c9569a3557d806b1480aeafece9 20bbd46383b85326837f45290ff87df708b3b310 e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18833
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 08:44:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashff433c9569a3557d806b1480aeafece9 20bbd46383b85326837f45290ff87df708b3b310 e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18833
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 08:44:45 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashff433c9569a3557d806b1480aeafece9 20bbd46383b85326837f45290ff87df708b3b310 e8e5212b8d90257f23bdb0d1d643b5e7d7528d964056c3a4a269b5e09f409f2d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E8E5212B8D90257F23BDB0D1D643B5E7D7528D964056C3A4A269B5E09F409F2D"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18833
Expires: Tue, 04 Oct 2022 13:58:38 GMT
Date: Tue, 04 Oct 2022 08:44:45 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg | 34.120.237.76 | 200 OK | 6.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash206fb65e75dbadf119512f71e0b78402 58ff0bf8ce7528b303d28bab01a80ad721705569 56c8d5f3b3060ee54bf81995269b86c070855d8c33bf437161339a45b309703f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F180dee10-1cde-4fbe-8a74-62b7b3bdb1e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6315
x-amzn-requestid: 6aa75b16-32e4-48a7-9fb0-9e3d5528c2d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZWSdsHUnIAMFXtw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6338cabd-742d8a436403683e0cd9368f;Sampled=0
x-amzn-remapped-date: Sat, 01 Oct 2022 23:18:21 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5sAzc5Ewv4g6Wqq6JJiLylG3Jyy_nlWrr5Oteeo6ebEgq7Rvss4XaQ==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Tue, 04 Oct 2022 04:42:51 GMT
age: 14514
etag: "58ff0bf8ce7528b303d28bab01a80ad721705569"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg | 34.120.237.76 | 200 OK | 5.5 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6c6882c60d7ca6f918c77104e3ad1d52 20ef861be49c652a938e0145e4ca3a60159367e2 861f5870990fbd2939d151ae18384cf311e87067ca9a50818efe0c2d51b83088
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8641c47a-9aff-4f73-bb07-6770cbbcc8d6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5504
x-amzn-requestid: 37405eb0-5c75-46a9-84c0-e8ed726995d8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHvHPvoAMF3mg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-77fd550b58af612525e74761;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: O1yNc4H21kixhUEE7099oNqs7a5ZnJBBjlZbsbmLvaXyzXzrK0dL3w==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 b36bf2c460ac693ce304817aed073112.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:33 GMT
age: 39612
etag: "20ef861be49c652a938e0145e4ca3a60159367e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f5077e-59b1-4f52-bd32-a57c373ce2f1.jpeg | 34.120.237.76 | 200 OK | 8.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f5077e-59b1-4f52-bd32-a57c373ce2f1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash59c6121e6f6cb833939e12585aca131e 5cc38c9cfe6a2ade7a1d8ee272c4eda47c35f5df 88b8a458ad437bf40d154b21d844ba56530ae05c2f42b417cfb0e6cffcb294e5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff4f5077e-59b1-4f52-bd32-a57c373ce2f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8308
x-amzn-requestid: 35cc0acc-ac90-4f36-a976-c61c34cfe4fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcqNXG3mIAMFujg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5722-112061742493dd5255c3fb00;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:41:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: XKgAjOSBnAxpQtL7a0q2jUDfpzjybydP2ZBV7J1ypKVeuMdAzl-MXg==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 39625
etag: "5cc38c9cfe6a2ade7a1d8ee272c4eda47c35f5df"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd8c08f8066cc732de8befd6ccd629a95 22aab05208a01ae5def4d63dc145085630f57bcb f8a560a0563518d992d0bd2655d2b5c406435a18e874ca00b51374d2ff901770
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F545190f2-96f3-40f8-bd46-cebe7171aee7.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9917
x-amzn-requestid: 2dff93d9-795d-4885-9b82-610b0d235a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTGEnIAMF1zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-117afa703663ada75627792c;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: DOS5kVEVqBrCVMKRw07fX-6HDgWVb9lJwkVM2pXs0PQHys6CBJUVfQ==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 39625
etag: "22aab05208a01ae5def4d63dc145085630f57bcb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8287b853-235b-49f5-9b5c-780827ac695b.jpeg | 34.120.237.76 | 200 OK | 9.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8287b853-235b-49f5-9b5c-780827ac695b.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash7b7345414898d451d930431b46d4bd00 a36475a0ec7d7b92593cadd4aa99ca38550f1cd1 79b541c69c78df0e4a4c26438431fd6b52754b589d80e929a4203063712a540c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8287b853-235b-49f5-9b5c-780827ac695b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9855
x-amzn-requestid: 15f15a2e-0028-40ac-be8f-8e20c37fd27e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpHuGX7oAMFgDA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5564-5fe693f30c91e4c82c8accb1;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:34:28 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ngoNHOX6fFTGa1Y_-yFOFUYYYqiLJCQOq3NISbmc3gX21YO0TLxx0w==
via: 1.1 b637bd7696854d7acbf96132dcf53200.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 23:32:19 GMT
etag: "a36475a0ec7d7b92593cadd4aa99ca38550f1cd1"
content-type: image/jpeg
age: 33146
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg | 34.120.237.76 | 200 OK | 4.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash6779181f9c06975f2a662da743893939 585e7146fd24cdc2496b05baafea04091dc541e2 8e9a9f92fd89b7cdce77884ccd76b83ab82d28f125ebfc1cb0d371d4046b7985
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a61745f-0c9b-404a-ba22-0a69cf2f0383.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4858
x-amzn-requestid: fb21c414-2994-444a-a838-e643fd05b171
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZcpvTEfPoAMFfeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633b5661-593dd8043b0490e7301cac0d;Sampled=0
x-amzn-remapped-date: Mon, 03 Oct 2022 21:38:41 GMT
x-amz-cf-pop: SFO5-P2, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: SGeDEPoXxsTV5UwkZnn3MJPbjhHhrKSsueHPxVapV_7Icl6daFk3oA==
via: 1.1 773ca14e6bd4bf9244988cb69fc9dca8.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Mon, 03 Oct 2022 21:44:20 GMT
age: 39625
etag: "585e7146fd24cdc2496b05baafea04091dc541e2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash3b4dda781e8cdec2da8add6a74d652a5 0606f47c65184e585160809e03805fc8c0f66aa5 4f4a6ef45e94e8f720acf3dc3227d03b973fb88935d77443c3e6409b886d53c1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4F4A6EF45E94E8F720ACF3DC3227D03B973FB88935D77443C3E6409B886D53C1"
Last-Modified: Sun, 02 Oct 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6263
Expires: Tue, 04 Oct 2022 10:29:15 GMT
Date: Tue, 04 Oct 2022 08:44:52 GMT
Connection: keep-alive
|
|
| gainfulsurvey.top/js/config.js?v=7 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/js/config.js?v=7 IP104.26.14.100:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /js/config.js?v=7 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-1085d"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PmXajKtrcU2%2BGmEI6iahSsk5Lu%2BsufRBqc0d8llBsbexDL4vERXFX40eW5WIDIrybmXxFugkyZWpDUOS9v8AdZJ5T3jkX0m0Vkq9nHXJgbnaXCLGmmHZSZxZ6n%2FkT27%2F7CjM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca326fe400b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| cdntechone.com/stattag.js | 104.21.29.183 | 200 OK | 0 B |
URL HTTP/2cdntechone.com/stattag.js IP104.21.29.183:0
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:17:49 GMT
etag: W/"62ebe31d-a8fa"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3192
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OAzrdBvtUDzMTzO04GDxPoyaD6t82ursOLTDa59do8QjHVRnYaeDLLpxlWkp6rK5F3WV4AWEqVoeu%2F1y299dBOjHOuGa02JXZpStWX2XXiusklSVNVH0nbJUFI8LwXKWFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32bef5b1bfe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/survey.js?v=13 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/js/survey.js?v=13 IP104.26.14.100:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /js/survey.js?v=13 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"633acffa-4a180"
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=brP%2BLeCqzSSB%2BY%2BcXFshmz%2FilAVfceknL2ae3Wp2DTXLh38jWOUl0QLJIAZGGJqifx2FFP34ksxgdEmoSsGTDwaY%2BMUoQGOKEGwmSMnSi9%2Bug6CRCnUjYAwSZ4WJr9hT3VFw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca32938b70b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/comments/en-sweep.json | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/js/comments/en-sweep.json IP104.26.14.100:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /js/comments/en-sweep.json HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/json
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-12f9"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tB4D3LOnhj%2FgNVno8Fp0zemogO9WcvRq9bMmwxeit6idgn1VKhmkdCdZ9HacNaNiwmWmnLLbWEDbEBYKlTnnDuioysUubkttIoOwdiAaPIBSsU2JA%2FD8%2BG0wVTFIi6LPG0PG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca32a29b40b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/css/sweep.css?v=7 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/css/sweep.css?v=7 IP104.26.14.100:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /css/sweep.css?v=7 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: text/css
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-f45e"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qoKltwcz%2BhNjOPZ%2BaFgN6tKcZJopNf9EeSpmcNdmT59JCyl69njWPcJ2GWabZEKZBh01t%2FIUli1WzrWaQhLcXmUQNzEUb4b33OqnORXdVdyhjqk2FoFilLKCgFsqt0MSKBHA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca326fe420b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/survey.js?v=13 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/js/survey.js?v=13 IP104.26.14.100:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /js/survey.js?v=13 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-4a180"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Drbgq6IGStGN2%2F%2BUnoBPvlunfzNj4%2BumiwPNcVjKuehjfGwrYmdstVVFU5WcRghCIhe1Dn20SarQcRoUYyKha%2F5dHoWuDpotbIujMC92jBmya9agTupla%2BRaHdV0jn1XWc7x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca326fe430b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24&utm_campaign=4&utm_medium=4526262&utm_content=zd_public_v2 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24&utm_campaign=4&utm_medium=4526262&utm_content=zd_public_v2 IP104.26.14.100:0
GET /sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24&utm_campaign=4&utm_medium=4526262&utm_content=zd_public_v2 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: text/html
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zu2q6Vx1%2FL86T1ki%2FjvHD9eMVmU2JDdRYP9wC4HvZ9fzD2SHSX3FxACRvAVLVgoGZdvgjRHSorrPrrrF1GnWXIpLIsWE5leZxc3FYzPWKqkzkeJAYFGpOfYhq0VnMeuMdyGO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca3286fbd0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24 IP104.26.14.100:0
GET /sweeps-survey.html?z=4526262&offer_id=2755&var=4&ymid=388uk8v5pkj24 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:43 GMT
content-type: text/html
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PXLKAVoCBlRg3oD4zTuZ2ONWlT6zJ%2FnoGjemAfSzM3TJdKZvb36sMEcWmIvkm6txLCm5%2FVMqPTrmP1J9z72%2BsA8TOcx4TZTxGXKgyo%2Fdoy2dD0YSmGmmA3HDUqaOQ1mAq9iP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca3261d350b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/data/_global-config-sd.js?v=3 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/js/data/_global-config-sd.js?v=3 IP104.26.14.100:0
| Analyzer | Verdict | Alert |
|---|
| fortinet | Phishing | |
GET /js/data/_global-config-sd.js?v=3 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: W/"633acffa-28b"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XsgUSwLtlJ9Nz6QqZxTLzOnXeW4ACqI2DXvzuK%2BZFn11zIcJtXShR%2F7qO0c5jRnJ99GD8mPO1pGPETp%2FYysYOIUeNmjOj2yZkdl4U%2Be0MRr0RzXdkxbWEkiuKULq4s%2FyoxZx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca326fe3c0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/js/data/rtc.js?v=1 | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/js/data/rtc.js?v=1 IP104.26.14.100:0
GET /js/data/rtc.js?v=1 HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
vary: Accept-Encoding
etag: W/"633acffa-3a65"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4YDXsEX11EMUt3GH2prLqTh4RsxqbhBHTA6n8VtayuaxC3%2BS8aHC0Fb8pQqOyAUDbcyRIuTnDRdWuLDnPg0UgM2Nd0KKJO9LEFh%2FRc%2FafWfM1zZcNu5646hRQsnRQBJjCcvA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 754ca326fe3f0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| itcleffaom.com/rotate?zz=4599387;4599749;4702124&var=4526262&ymid=4&uid=f11335f7598649ed96494b687e0b8ee9 | 139.45.197.237 | 200 OK | 0 B |
URL HTTP/2itcleffaom.com/rotate?zz=4599387;4599749;4702124&var=4526262&ymid=4&uid=f11335f7598649ed96494b687e0b8ee9 IP139.45.197.237:0
GET /rotate?zz=4599387;4599749;4702124&var=4526262&ymid=4&uid=f11335f7598649ed96494b687e0b8ee9 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gainfulsurvey.top
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: application/javascript
x-trace-id: ab3bd04d9ae00985db7ca8836973eefd
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://gainfulsurvey.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=f11335f7598649ed96494b687e0b8ee9; expires=Wed, 04 Oct 2023 08:44:44 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| gainfulsurvey.top/favicon.ico | 104.26.14.100 | 200 OK | 0 B |
URL HTTP/2gainfulsurvey.top/favicon.ico IP104.26.14.100:0
GET /favicon.ico HTTP/1.1
Host: gainfulsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 04 Oct 2022 08:44:44 GMT
content-type: image/x-icon
last-modified: Mon, 03 Oct 2022 12:05:14 GMT
etag: W/"633acffa-47e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cg6bvvFKqC4w4jh%2FymgXAoL3dluKfmkQxa14nxr%2BBEx%2FOS118jO2T8%2BBZtvy9IxedOHl8G6VQQj7qVj0j2Kr4gkGg2AonXOT%2FCMmIirzIAa1zLF9zfD8ZoIP2ZFtpT%2F%2BlrGi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 754ca32b9b6d0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|