viapawniarda.com/4/5305849/
139.45.197.238200 OK 829 B URL HTTP/1.1 viapawniarda.com/4/5305849/
IP 139.45.197.238:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (463)
Hash c9f0bfeb3ad2b0dc21aad4611d74e8ab
0aa5d25d1cce8baa621e3dd93a198ea990701f17
cb3a1189d9b44b5d39561f01d024e0c54ede75cbe5b5f20e7e6ac695f0165c7c
GET /4/5305849/ HTTP/1.1
Host: viapawniarda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 04:09:43 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: eb86cf3c9cc1f041e87951167db87112
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://sweepstakessurveytoday.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=845042103ec945fb82b79c7d478ce760; expires=Fri, 24 Nov 2023 04:09:43 GMT; path=/
oaidts=1669262983; expires=Fri, 24 Nov 2023 04:09:43 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dfb72f04bd7a4410640c0543bb4bd402
7c63b7e220b337b6a4f39864e11d6aa9e26c38ac
b7f7a4d355ed3b847a5e28f16030d5cbc715d47326aea20f292cd76dcaf59794
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7F7A4D355ED3B847A5E28F16030D5CBC715D47326AEA20F292CD76DCAF59794"
Last-Modified: Mon, 21 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10373
Expires: Thu, 24 Nov 2022 07:02:36 GMT
Date: Thu, 24 Nov 2022 04:09:43 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 770d09773b5f304acf141fd66a4862b4
5ddc46ab75de26c858a9a6f6d1beaaec9bb181f5
c7bcc6928fa1c0bb225ce8a2f6badd6cb1bd6ea002fb808ed34e8dafbd7b3b26
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5035
Cache-Control: max-age=114328
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:09:43 GMT
Etag: "637df674-1d7"
Expires: Fri, 25 Nov 2022 11:55:11 GMT
Last-Modified: Wed, 23 Nov 2022 10:31:16 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 03:17:13 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 3150
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 054ff0d1a0a43f7cb1d78dbd34e27f99
3caf54f3de1d6a8c6f6454083f8b8e7dec77db54
fcdcef8306ae31f20c366489e1f88aa40b08f154d25d45f4055c4f8cdef47634
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FCDCEF8306AE31F20C366489E1F88AA40B08F154D25D45F4055C4F8CDEF47634"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4341
Expires: Thu, 24 Nov 2022 05:22:04 GMT
Date: Thu, 24 Nov 2022 04:09:43 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: qUzXQ/WQ6oafKdUNCMk0H0f6L0d7ZDfw2LrJQkDiTjEMvH9mgBdyjQsW5YL6KUBGnDwzU+FcZqs=
x-amz-request-id: FKF0B8EYBGG45QJ0
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 03:40:15 GMT
age: 1768
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7db7791c99265b0fd4d5b4a8f766e328
a7283351206ea699babcc61e727ad4a63f3ff3fa
b512a6718dee3aff2e4e8a845181b7c9f4c9c61e7f54c20f24087edffdc33378
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 248
Cache-Control: max-age=167113
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:09:43 GMT
Etag: "637ed758-117"
Expires: Sat, 26 Nov 2022 02:34:56 GMT
Last-Modified: Thu, 24 Nov 2022 02:30:48 GMT
Server: ECS (amb/6B90)
X-Cache: HIT
Content-Length: 279
viapawniarda.com/favicon.ico
139.45.197.238204 No Content 0 B URL HTTP/1.1 viapawniarda.com/favicon.ico
IP 139.45.197.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: viapawniarda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Cookie: OAID=845042103ec945fb82b79c7d478ce760; oaidts=1669262983
HTTP/1.1 204 No Content
Server: nginx
Date: Thu, 24 Nov 2022 04:09:43 GMT
Connection: keep-alive
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Pragma: public
Cache-Control: max-age=315360000, public, must-revalidate, proxy-revalidate
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash d9fc305a152b948877a19e64f07e9904
0a6f467107ca0284e5d9c7a89e2431b3709b41ae
b0ffff086e960ab6a18ec015d70ccb6d1259aee22ceadda17ad465e1253756aa
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 04:09:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 21 Nov 2022 06:25:22 GMT
Expires: Mon, 28 Nov 2022 06:25:21 GMT
Etag: "0a6f467107ca0284e5d9c7a89e2431b3709b41ae"
Cache-Control: max-age=353137,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76ef4a6febb2b4e8-OSL
my.rtmark.net/img.gif?f=merge&userId=845042103ec945fb82b79c7d478ce760
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=845042103ec945fb82b79c7d478ce760
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=845042103ec945fb82b79c7d478ce760 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=845042103ec945fb82b79c7d478ce760; expires=Fri, 24 Nov 2023 04:09:43 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 7db7791c99265b0fd4d5b4a8f766e328
a7283351206ea699babcc61e727ad4a63f3ff3fa
b512a6718dee3aff2e4e8a845181b7c9f4c9c61e7f54c20f24087edffdc33378
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 248
Cache-Control: max-age=167113
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:09:43 GMT
Etag: "637ed758-117"
Expires: Sat, 26 Nov 2022 02:34:56 GMT
Last-Modified: Thu, 24 Nov 2022 02:30:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 970dc5ce1693949b64ea15b24bfb639b
af2f53945ecacc020fc56eb01089f589f5711eda
1c54351546080ee0abc8faff0b81a5ea222914f24fe4b200e267d2ab119bbc5d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1C54351546080EE0ABC8FAFF0B81A5EA222914F24FE4B200E267D2AB119BBC5D"
Last-Modified: Wed, 23 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5141
Expires: Thu, 24 Nov 2022 05:35:25 GMT
Date: Thu, 24 Nov 2022 04:09:44 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.76.226200 OK 345 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 970dc5ce1693949b64ea15b24bfb639b
af2f53945ecacc020fc56eb01089f589f5711eda
1c54351546080ee0abc8faff0b81a5ea222914f24fe4b200e267d2ab119bbc5d
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "1C54351546080EE0ABC8FAFF0B81A5EA222914F24FE4B200E267D2AB119BBC5D"
Last-Modified: Wed, 23 Nov 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5141
Expires: Thu, 24 Nov 2022 05:35:25 GMT
Date: Thu, 24 Nov 2022 04:09:44 GMT
Connection: keep-alive
sweepstakessurveytoday.com/css/sweep.css?v=7
172.67.145.25200 OK 32 kB URL HTTP/2 sweepstakessurveytoday.com/css/sweep.css?v=7
IP 172.67.145.25:0
File type ASCII text, with very long lines (62915), with no line terminators
Hash ad467ff1f3b356c381c12e6d8d5035df
a0b67affe95f948d023f674284b94f36c2a57045
ddb4e73e7efbb4a23c0fa6275429b6a34d7131c948c22bded33f4b67f78da24f
Analyzer Verdict Alert quad9 Sinkholed
GET /css/sweep.css?v=7 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: text/css
cf-bgj: minify
etag: W/"637ccd97-f476"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GpNffpdh0bsgpyI1xPrhg%2FD4NacrvvP4w4AO7B27M3gfRoaS%2B3R%2BGTri1M2M1%2FWMAg3PQ9eIMODMAVjhh46vIXYIa8pkuP63h83bS4i5%2F95ztwEI4CdFGkrAjeBeO0Vp2jpJs60Ij7O3yKrwNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70cbba0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
my.rtmark.net/gid.js
139.45.195.8200 OK 65 B IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 3c175a753c1153340f1ec9df0eb6e55d
9c2d8b7ff66b2b96de2e8795fc0b3ba4be889abf
50c0dd352ec5c14b36921ca6706c93a3dbfb45913d352f49a0aa44c4920a2c2c
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:09:44 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=8af6d71cd6054d1988b89572bf478880; expires=Fri, 24 Nov 2023 04:09:44 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 04:08:53 GMT
cache-control: public,max-age=3600
age: 51
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.globalsign.com/gseccovsslca2018
104.18.20.226200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.20.226:0
Hash e61001fbaec04adf481ca39cbe93143a
795c3a16613aa1b1e7b5c4ed9053bd578c8ab4b6
ad5977af4ea671c2b540278cd3abf4f36704fbd8936440e728fafdc05d2cdcf4
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 04:09:44 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Mon, 28 Nov 2022 02:46:05 GMT
ETag: "795c3a16613aa1b1e7b5c4ed9053bd578c8ab4b6"
Last-Modified: Thu, 24 Nov 2022 02:46:06 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1031
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76ef4a74a90bb4fd-OSL
sweepstakessurveytoday.com/js/sweep.js?v=4
172.67.145.25200 OK 11 kB URL HTTP/2 sweepstakessurveytoday.com/js/sweep.js?v=4
IP 172.67.145.25:0
File type ASCII text, with no line terminators
Hash cba73f21653de9f1f4d37de949f82022
0ec19b8f518ee3b8e1ccd2383c92b96d6edeb2cd
e942c4d29fa87c8cf316f71b94ae808471e88c6f06ad503f152f8711b5c516bd
Analyzer Verdict Alert quad9 Sinkholed
GET /js/sweep.js?v=4 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"637ccd97-d3"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dXfsSX7DLxmCMMES2Mx39ljo5U%2BYRlJexFc0BI1bwE5nu5Us2S1hy1pQce5kKg0FWNZDDPLusn60uWJjTShcu%2FCcVIbrrQk9HHvD%2FfuT2ppwLW8peFRSPPuFhqlB82VISoJDqyxhMsgNf7BAQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70dbbe0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash eb52164d651f5f45416e873aec29eb04
405b29bb7e7cd4367cf82988f8603e53db65f139
ed885e05db822ff30fe951e10b6d4f21e574d053939afca792992a1549a15301
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2946
Cache-Control: max-age=107175
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 04:09:44 GMT
Etag: "637de2ad-1d7"
Expires: Fri, 25 Nov 2022 09:55:59 GMT
Last-Modified: Wed, 23 Nov 2022 09:06:53 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d2d7d342805aa9fc63b308c8faddd725
f47b62e5af6bc069ad60d96c30c1f40936b0a0a4
2fceb9140609b021328afaf9209f8a477eadb67b570a86a31df40d37104a769c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2FCEB9140609B021328AFAF9209F8A477EADB67B570A86A31DF40D37104A769C"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21102
Expires: Thu, 24 Nov 2022 10:01:26 GMT
Date: Thu, 24 Nov 2022 04:09:44 GMT
Connection: keep-alive
sweepstakessurveytoday.com/js/data/rtc.js?v=2
172.67.145.25200 OK 78 kB URL HTTP/2 sweepstakessurveytoday.com/js/data/rtc.js?v=2
IP 172.67.145.25:0
File type ASCII text, with very long lines (10798), with no line terminators
Hash 82f70894aad4ecaf78db4ce0987c5356
7e94a0e83a5a0ccf5253c39aa6ae82a625a3df71
bfa51ec812e947971fc35f7203ff2fb5845862789bd578a4578b48bb2808080b
Analyzer Verdict Alert quad9 Sinkholed
GET /js/data/rtc.js?v=2 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=14949
etag: W/"637ccd97-3a65"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2BEMB86nyigsv9sWajhVd4oUTf7ZJXsB9NiSFTLsIdE4gZk7eH7JeL7IC3%2FSj5XhwXY5%2FsWI%2FB8KFYtMolerPmcfGZEo9rNG0btT1x2IQsbqJim1vbvsXMeMoUMFdRgJBynXG5vvJHSYI%2BXTBA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70bbb40b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash ba98650cceb17a47ac0f34de3c3c2574
78e21c7a408c8ef34065defa22dbcb926f562d9b
8a311b1ba0b977b6b27fd02043471f29e6608bbe3c2cabe904b09f5f04510d98
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 04:09:44 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 01:33:16 GMT
Expires: Tue, 29 Nov 2022 01:33:15 GMT
Etag: "78e21c7a408c8ef34065defa22dbcb926f562d9b"
Cache-Control: max-age=422010,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76ef4a74ed74b4e8-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
37.48.68.71200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 37.48.68.71:0
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1198
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 24 Nov 2022 04:09:44 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://sweepstakessurveytoday.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
push.services.mozilla.com/
44.237.51.86101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.237.51.86:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fQmn81N4LMSI4LkaivLsjg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KmX/oIv6eADMZlALWdx7D23BSdo=
mc.yandex.ru/metrika/advert.gif
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:44 GMT
access-control-allow-origin: *
etag: "637b3777-2b"
expires: Thu, 24 Nov 2022 05:09:44 GMT
accept-ranges: bytes
last-modified: Mon, 21 Nov 2022 11:31:51 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A535%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A415382687%3Arqn%3A1%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C115%2C60%2C1%2C%2C0%2C%2C150%2C7%2C%2C%2C%2C607%3Ans%3A1669262983161%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119302 Found 400 B URL HTTP/2 mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A535%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A415382687%3Arqn%3A1%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C115%2C60%2C1%2C%2C0%2C%2C150%2C7%2C%2C%2C%2C607%3Ans%3A1669262983161%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 2077ad82fe01985c5249d7bd0f7593bb
2cbbfe0de30493d42938472e6dc0893a450c4403
5884d3a0cd283d085f9e086ab09c6821241d6e93e68efcb03f0f770f43ab9655
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A535%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A415382687%3Arqn%3A1%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C115%2C60%2C1%2C%2C0%2C%2C150%2C7%2C%2C%2C%2C607%3Ans%3A1669262983161%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afp%3A535%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A415382687%3Arqn%3A1%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A1%2C115%2C60%2C1%2C%2C0%2C%2C150%2C7%2C%2C%2C%2C607%3Ans%3A1669262983161%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29rqnl%281%29ti%282%29
date: Thu, 24 Nov 2022 04:09:44 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
set-cookie: yandexuid=7496207861669262984; Expires=Fri, 24-Nov-2023 04:09:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=7496207861669262984; Expires=Fri, 24-Nov-2023 04:09:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=1186149921669262984; Path=/; SameSite=None; Secure
i=T4oy5C6IeoUqwc9O64YIpwCbPFUscJAmiO7OL1Kf/R7Wt0FBZ+leh8HEP3GLqVjZ/Y7MLvjZXO2XeYg9hRAaHtApzGU=; Expires=Sun, 21-Nov-2032 04:09:42 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1700798984.yc.1669262984#1700798984.yrts.1669262984#1700798984.yrtsi.1669262984; Expires=Fri, 24-Nov-2023 04:09:44 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:44 GMT
last-modified: Thu, 24-Nov-2022 04:09:44 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonSurveyStart&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A42547263%3Arqn%3A2%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1498%2C1498%2C0%2C%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonSurveyStart&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A42547263%3Arqn%3A2%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1498%2C1498%2C0%2C%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonSurveyStart&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A42547263%3Arqn%3A2%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1498%2C1498%2C0%2C%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 79
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonStepChange&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A246770319%3Arqn%3A5%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonStepChange&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A246770319%3Arqn%3A5%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonStepChange&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A246770319%3Arqn%3A5%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonUnique&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A646382110%3Arqn%3A4%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonUnique&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A646382110%3Arqn%3A4%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonUnique&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A646382110%3Arqn%3A4%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexCall&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A896772239%3Arqn%3A3%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexCall&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A896772239%3Arqn%3A3%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexCall&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A896772239%3Arqn%3A3%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexLoad&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A539891863%3Arqn%3A6%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexLoad&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A539891863%3Arqn%3A6%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexLoad&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A539891863%3Arqn%3A6%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A711604201%3Arqn%3A7%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A711604201%3Arqn%3A7%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A711604201%3Arqn%3A7%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 53
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A877426428%3Arqn%3A9%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A877426428%3Arqn%3A9%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A877426428%3Arqn%3A9%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 384
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A534750013%3Arqn%3A8%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(2)
93.158.134.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A534750013%3Arqn%3A8%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(2)
IP 93.158.134.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3D845042103ec945fb82b79c7d478ce760%26s%3D619496449109136161%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1669262984_f329ec9c2351b12222e3a42ed7013c78b5f01c106cd6480584940e62d776955e&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Ahbzj7lpjz3smdgzs1sf0c%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A923%3Acn%3A1%3Adp%3A0%3Als%3A1236364362277%3Ahid%3A64909688%3Az%3A0%3Ai%3A20221124040944%3Aet%3A1669262985%3Ac%3A1%3Arn%3A534750013%3Arqn%3A8%3Au%3A1669262985410887477%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1669262983161%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1669262985%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Thu, 24 Nov 2022 04:09:45 GMT
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Thu, 24-Nov-2022 04:09:45 GMT
last-modified: Thu, 24-Nov-2022 04:09:45 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8336
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:09:46 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 611d1eca860866489908506a26bd6a2a
5e8c401f098357cd12889a6e507baf7c8a87772a
e3216e5edd547bc8f6a43780da5a118842b96de96d5cf668af68d8706ceb32e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E3216E5EDD547BC8F6A43780DA5A118842B96DE96D5CF668AF68D8706CEB32E4"
Last-Modified: Mon, 21 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8336
Expires: Thu, 24 Nov 2022 06:28:42 GMT
Date: Thu, 24 Nov 2022 04:09:46 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d9d93b2a6875d446c3467eb49767eef5
303c571b13b05fcf27ee1159d8fdf6369aaef0a2
2a2345a925e0187979930a7f2de8548957ad9f2baae77364dcb157286e2b3fcf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F50d7d834-f80d-4fd9-a728-24643ed00c45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6789
x-amzn-requestid: 4d94ce1b-d18f-43b8-bb4d-e7093f9bea42
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvd2G9UIAMFrEg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc5f2-64a570135be59b83031811da;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:04:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JygkDI7XSvlgurUTot874ZAXlOIqnv4cntMQ55IvHVqw93JBcksZjQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 07:15:15 GMT
etag: "303c571b13b05fcf27ee1159d8fdf6369aaef0a2"
content-type: image/jpeg
age: 75271
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
34.120.237.76200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06c6e720bc9900b38e88cd72f739603e
22884cbc78622d6f78c1c3397c9b440946144a99
8675d08e6d8ae5bdedbc7c7ce647f8c6e72cc457917b4ed1856c50b11c2fe88b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20f7461d-18d1-4343-9ecb-d68d44ce1ee4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7589
x-amzn-requestid: 533d7650-cb21-4090-a50a-e205adad316d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: brr5zH4qoAMF79Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63748d0b-017f7bf4390eb124097af648;Sampled=0
x-amzn-remapped-date: Wed, 16 Nov 2022 07:11:07 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: nwXP5jm9A2Cl3_-Lm194ycXkeClig1L9hwgUgE8i8NF-Vv2gNfj_4Q==
via: 1.1 95b0ac620fa3a80ee590ecf1cda1c698.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 15:14:08 GMT
age: 46538
etag: "22884cbc78622d6f78c1c3397c9b440946144a99"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
34.120.237.76200 OK 5.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0856fdb55f19f03a1bec38b3d6e0ac77
89accd230fba95fe0049678070817b36ead015fa
17c6e6f9bb8f4261fff2dc2a43ed994986418761624b8afead768e89927594f2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F433fbaf5-7c54-485b-af70-542e1e788832.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5070
x-amzn-requestid: d86d95ad-9b78-4047-82e7-04e83a97e330
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEwViF1GIAMF_PQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9423-10809ba1634776171cf79cb8;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:44:03 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 8rbsN9OVJmneT9ov-Q7V4RB8DP5UWhhn-7cnukHiBpl06zmMM0zJTg==
via: 1.1 0dc4feb22bb4657ce2bb95fd05ec7122.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:20 GMT
age: 22346
etag: "89accd230fba95fe0049678070817b36ead015fa"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eb94ecb5881a7e49d964e4287d11e7a4
4b131a189db1b615e2519a28cad83d78297ab67f
f3693e29eb7b72361093434142e3f18969c1a0b02350fab430fa29c7c127bd1a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe021fc4e-f76c-4fe9-9470-b59452c93459.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11401
x-amzn-requestid: 3bc374eb-7d70-4b95-94a7-2ad06cae4726
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvCtHcmoAMFxgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9211-333793987245ff9e741b9aed;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:35:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kkI9Vh2vZeJPwz2JVL5MErsBBwk8-2Jo49yc0sFqv5pxIyBi6azFIw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:57:23 GMT
age: 22343
etag: "4b131a189db1b615e2519a28cad83d78297ab67f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
34.120.237.76200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a939ef79a2ad8614e7d3362de0cfbd8
51e1751527dff72955ba62b2d9a2b92199dca31a
564e58dc2e0b2ea0fd67faa30cbf622c9271c1d1f26ae14eacb24c20b1473786
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F697d6334-d8f8-4a7f-9401-63ad6bab8f38.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3805
x-amzn-requestid: 629cde59-1260-40ff-923e-a1d91c6b7a5a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvynGq5IAMFgoA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9343-162460086ad3b77c4bccd4f2;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: wW2JzhBhHcEvMlNxg2ALt7UgDmQQG6s17jCPUp7IzEbrzV6WnU0rzQ==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:55:29 GMT
age: 22457
etag: "51e1751527dff72955ba62b2d9a2b92199dca31a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 64d79191f005c9876b952c5f948aa0f7
1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a
00fb36c3d322e8302c5ce202d6d4119d637510cd6f3b63e1347781ec3bb9d7fc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F81517ad5-7c1b-49aa-9ba9-dbfa36fbb071.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13882
x-amzn-requestid: 9022b0b3-31d5-4149-a969-02514f11b95a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cEvzNHjMoAMFWMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637e9347-0e8354a02bef623644714e31;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 21:40:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ve4q5FDkwMGhPK6ZVVVCZtoBTaGaz43r_PwINzwS5Nx5tcZeQkVIfw==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 23 Nov 2022 21:49:47 GMT
age: 22799
etag: "1102dbdcbcabf5c25d17840f8f00d5b55b9b8f0a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/sweeps-survey.html?offer_id=112755&geo=NO&oaid=845042103ec945fb82b79c7d478ce760&s=619496449109136161&z=5305849&b=14374854&var=&campaignid=5958240&utm_campaign=&utm_medium=5305849&utm_source=zd_5958240&utm_term=14374854&utm_content=zd_public_v2&country=NO&testinapp=4333347&testinapp=4834358&rdk=rk1
172.67.145.25200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/sweeps-survey.html?offer_id=112755&geo=NO&oaid=845042103ec945fb82b79c7d478ce760&s=619496449109136161&z=5305849&b=14374854&var=&campaignid=5958240&utm_campaign=&utm_medium=5305849&utm_source=zd_5958240&utm_term=14374854&utm_content=zd_public_v2&country=NO&testinapp=4333347&testinapp=4834358&rdk=rk1
IP 172.67.145.25:0
Analyzer Verdict Alert quad9 Sinkholed
GET /sweeps-survey.html?offer_id=112755&geo=NO&oaid=845042103ec945fb82b79c7d478ce760&s=619496449109136161&z=5305849&b=14374854&var=&campaignid=5958240&utm_campaign=&utm_medium=5305849&utm_source=zd_5958240&utm_term=14374854&utm_content=zd_public_v2&country=NO&testinapp=4333347&testinapp=4834358&rdk=rk1 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: text/html
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bw5bHf8w7RK%2F6oBzA4VqMIgF8xmvp16i%2Br1p3blqQow3xaU%2BhzQkqRmc1Dp5r1yxLbFV2HM3EYkY2%2BRJ1so6IgRm0aNUePKKcsUsfOLHrjzBkYhASHdnuKq4eCD%2BONFt69jFF3lG%2Bqjol6pYTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a6fdb670b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=5305849&uid=8af6d71cd6054d1988b89572bf478880
139.45.197.237200 OK 0 B URL HTTP/2 itcleffaom.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=5305849&uid=8af6d71cd6054d1988b89572bf478880
IP 139.45.197.237:0
Analyzer Verdict Alert quad9 Sinkholed
GET /rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=5305849&uid=8af6d71cd6054d1988b89572bf478880 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 04:09:44 GMT
content-type: application/javascript
x-trace-id: a5d740be1c8af852debb88b5984f2943
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=8af6d71cd6054d1988b89572bf478880; expires=Fri, 24 Nov 2023 04:09:44 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/css/survey.css?v=2
172.67.145.25200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/css/survey.css?v=2
IP 172.67.145.25:0
Analyzer Verdict Alert quad9 Sinkholed
GET /css/survey.css?v=2 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19859
etag: W/"637ccd97-4d93"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HqGOh0ivLApq28btMmZHphZPqLQIk%2F5Pq%2F924jrhcd0ZaWH6ARPh4z%2FzwtRNE%2F%2FaYGbje8AIxgbGt%2FT3h0DjX3x74a5XLXGEwYnPczTW6eevx%2FQLDWws4DQAJyFH4pall8E7R63Edx%2Fdhh9YXA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70cbb90b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/js/config.js?v=10
172.67.145.25200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/js/config.js?v=10
IP 172.67.145.25:0
Analyzer Verdict Alert quad9 Sinkholed
GET /js/config.js?v=10 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"637ccd97-11c13"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rG4IWL8qV%2F2g1N92BzmDAgd1fbovk1B8hL66lkPxF1gKQN5TUzC7GX4zO%2FV3%2FXVALXN8blsTdBAX5WMaGz7Fw%2BxjwMZZE1efZ7twZvPfpxX3QM5504Zav1ekWIC99r9zHkmFdwpWYs%2FppOZ0VA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70bbb60b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
172.67.149.153200 OK 0 B URL HTTP/2 cdntechone.com/stattag.js
IP 172.67.149.153:0
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:44 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:52 GMT
etag: W/"634eb2c0-32b7"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 2288
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CT3ea%2Fl3tfmr%2BKisbs1DSGTN32WPxpUXBGs5Wo8IwwUHYfAUGZ9f94TADysDqpXoIRQiJTqC19C5qhWcWjMO9jIw3fwpGdyfJ7A3YkL8%2BNE3u0VkhecSIA%2BW504mwUM17A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76ef4a72b8141bfa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/js/data/_global-config-sd.js?v=5
172.67.145.25200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/js/data/_global-config-sd.js?v=5
IP 172.67.145.25:0
Analyzer Verdict Alert quad9 Sinkholed
GET /js/data/_global-config-sd.js?v=5 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=683
etag: W/"637ccd97-2ab"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HfX1fCJrlEF3MFRKH13gwjqPBN0lj%2BFOD3fpi2c6gmpTk4ZGvH6EJbwG3Bu1O1cZVeGry5iGIEAnzZ71X7XjMYF%2BHUYjsSiGCzmosgH0KIyLykXbSoM%2BTRbLtUFLB0VzF8PWzzhfeotqlVF0MQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70bbb20b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/css/sweep_3.css?v=0
172.67.145.25200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/css/sweep_3.css?v=0
IP 172.67.145.25:0
Analyzer Verdict Alert quad9 Sinkholed
GET /css/sweep_3.css?v=0 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=5430
etag: W/"637ccd97-1536"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 971
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pWMNmEkRs0kY9iO4%2FSXOQgu9S5XdtY5aPLspBKJ12cSmKCJSO3cBhvR2gHZ7Rv%2BsLx%2Fz%2FNqSk%2F0LVPOffelOW%2BDgIj1gynSRTbfYg5DJjXK1EU9sg5wcFif5y%2B62WHfd28GGPLARRB0OYhWFlQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70cbbb0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/js/survey.js?v=16
172.67.145.25200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/js/survey.js?v=16
IP 172.67.145.25:0
Analyzer Verdict Alert quad9 Sinkholed
GET /js/survey.js?v=16 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 04:09:43 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"637ccd97-4c18c"
last-modified: Tue, 22 Nov 2022 13:24:39 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: HIT
age: 970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AYy7iyv7ZCscBQ2StnCK86cCHOEQDZab8gsy6j%2B0ScPLU3dZc0p%2BifolyDGdL1oGFPpDcfpdG0H7JBoD%2F5wJubWuakEzM7fXbnM7ule7ySPZv6okjU1GSVOkEbZdA81yMPUviCrVHQVDT%2F%2FLGg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76ef4a70dbbd0b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2