Report - promosurvey.org/sweeps-survey.html

Report Overview

Submitted URL
promosurvey.org/sweeps-survey.html
IP
104.26.15.91
ASN
#13335 CLOUDFLARENET
Submitted
2022-10-07 19:07:30
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
ocsp.sectigo.com	487	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	656 B	1.9 kB	104.18.32.68
ocsp.globalsign.com	2075	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	347 B	1.4 kB	104.18.20.226
datatechonert.com	46154	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	446 B	483 B	139.45.195.253
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3.2 kB	67 kB	34.120.237.76
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	401 B	5.8 kB	34.160.144.191
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	4.4 kB	23.36.77.32
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	758 B	2.7 kB	54.230.111.118
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	321 B	229 B	34.117.237.239
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329 B	737 B	93.184.220.29
mc.yandex.ru	2672	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	80 kB	93.158.134.119
promosurvey.org	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	11 kB	216 kB	172.67.70.225

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2022-10-07	medium	datatechonert.com	Sinkholed

JavaScript (13)

	URL	Size	First Seen	Last Seen
	promosurvey.org/js/data/_global-config-sd.js?v=3	344 B	2023-03-08	2023-03-10
Pretty URL promosurvey.org/js/data/_global-config-sd.js?v=3 IP 104.26.14.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 01:43:53 Last Seen2023-03-10 14:24:13 Times Seen1 Hash 24433b16c33baeae95ad843a01f35dc9 6c3a536ccc97e545a7ffcb6cd9fca536d78b08b4 be17be54eb20743bf99e34da9768376e9f1d4bbecb97982e06c6f337fc55d70b Loading...

	promosurvey.org/sweeps-survey.html	1.2 kB	2023-03-07	2023-03-11
Pretty URL promosurvey.org/sweeps-survey.html IP 172.67.70.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 18:48:08 Last Seen2023-03-11 14:36:48 Times Seen1 Hash 2a29357b03306f0b02184dd3d4016f27 c0646f66b7add9c1dafbe02c7e37d300667594de b7e00634052894ab4253f6e14b8d0f504ee9d247f187e3239fb3b502fd3dad2f Loading...

	promosurvey.org/js/sweep.js?v=4	144 B	2023-03-07	2023-03-10
Pretty URL promosurvey.org/js/sweep.js?v=4 IP 104.26.14.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 21:32:06 Last Seen2023-03-10 17:33:36 Times Seen1 Hash c79fa1237e7563deaafcfff13e378628 644be68e1266b620dc3e722f75a5d8739a0b7dc1 61eb6f286b46d82ad08ac37f93f19df49526c7b329eba30cd9f9e2c57b670e22 Loading...

	promosurvey.org/js/data/sd-501.js?v=4	8.1 kB	2023-03-08	2023-03-11
Pretty URL promosurvey.org/js/data/sd-501.js?v=4 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:46:38 Last Seen2023-03-11 19:21:02 Times Seen1 Hash a31474161a8f11ffcdc3852d101232f5 a0a071528997fd1bdd1501a933c91bbd8df63767 11b3eb4797276a09b0d160511deb3bf5f731f5cad6d146cf809a1dd97632bd96 Loading...

	cdntechone.com/stattag.js	43 kB	2023-03-07	2023-03-17
Pretty URL cdntechone.com/stattag.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:00 Last Seen2023-03-17 12:47:09 Times Seen1 Hash ec71533d7696102b2e278e3a35c2da01 82f1c46094b38ff2656af0cda8f625dd9b9d2a26 ba25ceb996c4d0f021198f7192df75aa3f666fdfd73e61bccebffa4fb6ba1349 Loading...

	promosurvey.org/sweeps-survey.html	512 B	2023-03-08	2023-03-11
Pretty URL promosurvey.org/sweeps-survey.html IP 172.67.70.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:19:24 Last Seen2023-03-11 10:15:15 Times Seen1 Hash a1037e53db3060c76e3e815abcbabe97 45b2bad924322c980cb70dc120bc7bb8749ae593 84f98560bb7260892aa9d5cd59c00aa5202adc48d4a33b32afb25f9e24adc363 Loading...

	promosurvey.org/js/data/rtc.js?v=1	11 kB	2023-03-07	2023-03-11
Pretty URL promosurvey.org/js/data/rtc.js?v=1 IP 104.26.14.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 22:35:35 Last Seen2023-03-11 19:40:39 Times Seen1 Hash c54e6c9e35e7922087a2b0a9398563ea f4647d3a5ec4302077b1f83a60d6b82a6081e9ce fb7db57688911376b81680d68b27805599bf331fb1853524a3d39d8a73f57ec9 Loading...

	promosurvey.org/sweeps-survey.html	41 B	2023-03-07	2023-12-22
Pretty URL promosurvey.org/sweeps-survey.html IP 172.67.70.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:03:05 Last Seen2023-12-22 09:41:33 Times Seen2 Hash 01504f3c68447a2aa5812832546c30c8 1a2ed7673ad287643823432efed1bf698450ef5d 9e7863252dc4a2c1871dc34c7ab34f13dc738d6f38acbf9827ce17ddee3b336b Loading...

	promosurvey.org/sweeps-survey.html	237 B	2023-03-08	2023-03-12
Pretty URL promosurvey.org/sweeps-survey.html IP 172.67.70.225 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:19:24 Last Seen2023-03-12 21:16:07 Times Seen1 Hash 19b8722efab4e2bec7b1aaab4b5d9ab0 92dba16dc1812ec42b43aa97cc31c97138dea642 b972d04cd1cd17737b5ae248abe902f2defab803e7465a3eec21c92c05e6218a Loading...

	mc.yandex.ru/metrika/tag.js	213 kB	2023-03-08	2023-05-04
Pretty URL mc.yandex.ru/metrika/tag.js IP 93.158.134.119 ASN #13238 YANDEX LLC Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 08:14:19 Last Seen2023-05-04 17:35:27 Times Seen2 Hash cdb00ea7b9083e60cf15798d8b196ad4 b4697f3648927f715312ce7f0f49800c845004c4 c01ee4ad73a35630310a11d10b6d654586843d9bf863efea29b231541b409006 Loading...

	promosurvey.org/js/config.js?v=8	68 kB	2023-03-08	2023-03-10
Pretty URL promosurvey.org/js/config.js?v=8 IP 104.26.14.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 03:12:01 Last Seen2023-03-10 14:22:46 Times Seen1 Hash 89653056f8f6fb1ee030e75823753f72 37f2fd98180eefc9a17a201eee70d01a2b341eba cf3fe8f41a6be84115d07d5b911384f1809b9a75035bfd587ee351f12a824819 Loading...

	promosurvey.org/js/survey.js?v=14	304 kB	2023-03-08	2023-03-08
Pretty URL promosurvey.org/js/survey.js?v=14 IP 104.26.14.91 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 08:19:50 Last Seen2023-03-08 12:15:36 Times Seen1 Hash 25399f13c87fd13335f9c7ff69e88191 29388307fe12422fbc959e08776fb28b579846d9 634146a5f227194c7edf5f953a0188696ec1691a845f348fa0d1bfd0424c0559 Loading...

		Size	First Seen	Last Seen
	#1 Write - 3a824154b16ed7dab899bf000b80eeee	4 B	2023-03-07	2024-02-13
Pretty Observations First Seen2023-03-07 01:02:03 Last Seen2024-02-13 04:29:14 Times Seen34 Hash 3a824154b16ed7dab899bf000b80eeee e575dccc71140754dd85beda5965b6a358150309 b1ab1e892617f210425f658cf1d361b5489028c8771b56d845fe1c62c1fbc8b0 Loading...

HTTP Transactions (59)

URL IP Response Size

promosurvey.org/sweeps-survey.html

172.67.70.225

301 Moved Permanently

0 B

URL HTTP/1.1
promosurvey.org/sweeps-survey.html
IP
172.67.70.225:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /sweeps-survey.html HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Date: Fri, 07 Oct 2022 19:07:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 07 Oct 2022 20:07:18 GMT
Location: https://promosurvey.org/sweeps-survey.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rghPiDktczN0QUZzbeLpYE3YAVzYr3VQXNnsayltJg82d0aHIdT%2Bm30fGT87BwrHGIs4tkZ909B4b1D8N%2FDXocnfc%2FTo4hrvSFxrZVK8r8yJRMCv3J1oHmtKIAfVpMmWeg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7568eb424daeb527-OSL
alt-svc: h2=":443"; ma=60

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
282f6e1328452c1cb41f6a6272fff757
20b9ff1b5f4f81b645769bd4b4cf7bf7dfc16262
6a8070ebe51259cb11db68cca2c81f3c7408fad481d8c14cc1c38912442c63f4

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A8070EBE51259CB11DB68CCA2C81F3C7408FAD481D8C14CC1C38912442C63F4"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3558
Expires: Fri, 07 Oct 2022 20:06:36 GMT
Date: Fri, 07 Oct 2022 19:07:18 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

54.230.111.118

200 OK

939 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/
IP
54.230.111.118:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=259200
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 05 Oct 2022 15:47:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aQhJBYnZciX4bkZb2gEUE8daioS9Mc3vIJeLb4DGPazj4T3XroIa5Q==
Age: 184800

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
94a09d62ab3057cda67a091c8d7478f5
b1c9d223a951d0bc9f17c9f3b84501266a552b58
582364f9f6014520c269f1f794e7c34027bd2697b53e5d02fad43e74a735e471

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "582364F9F6014520C269F1F794E7C34027BD2697B53E5D02FAD43E74A735E471"
Last-Modified: Thu, 06 Oct 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9489
Expires: Fri, 07 Oct 2022 21:45:28 GMT
Date: Fri, 07 Oct 2022 19:07:19 GMT
Connection: keep-alive

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: izeQeNfPlj3yKFfZxPuufZkv8fIELAdrp+UwDDjCGsWP3PVbPKda73UnbUy+WuuWyRVAjj0gH1I=
x-amz-request-id: WWV03NQBR54RKJ3H
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 07 Oct 2022 18:59:17 GMT
age: 482
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

54.230.111.118

200 OK

329 B

URL HTTP/1.1
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
54.230.111.118:0
ASN
#16509 AMAZON-02

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Expires, Backoff, ETag, Last-Modified, Pragma, Cache-Control, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
X-Content-Type-Options: nosniff
Date: Fri, 07 Oct 2022 19:05:29 GMT
Cache-Control: max-age=3600
Expires: Fri, 07 Oct 2022 19:19:58 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SUqDprjiqKExBBdyMHS_5VacDas1C9Yx820nfkMKRaRybilryaGMyg==
Age: 2258

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
5690c00c386c753af6de22646db06434
aa5b0574bf8aa58bc5608d593e7dcba23100b454
741af8ab8cb30aac3a08fe0ae823577cb602c717416f9bcd52cef5b830b5fb0e

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 19:07:19 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 06 Oct 2022 18:25:20 GMT
Expires: Thu, 13 Oct 2022 18:25:19 GMT
Etag: "aa5b0574bf8aa58bc5608d593e7dcba23100b454"
Cache-Control: max-age=515279,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7568eb480b69b521-OSL

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
d6c404502c7987174a84d8f0a3efab23
fc3a3f6d63acab3f659fb3536b65fd8564ec8628
94b5693df873bd923ffbf31f576fff01d2628e5796af4c6b91306a743e27d19b

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1706
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 07 Oct 2022 19:07:19 GMT
Last-Modified: Fri, 07 Oct 2022 18:38:53 GMT
Server: ECS (ska/F708)
X-Cache: HIT
Content-Length: 471

promosurvey.org/img/sweep/tokens10k.png

104.26.14.91

200 OK

67 kB

URL HTTP/2
promosurvey.org/img/sweep/tokens10k.png
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 480 x 500, 8-bit colormap, non-interlaced\012- data
Size
67 kB (66622 bytes)
Hash
7226e7c7102de83aea128e7417e87779
1777a0c66bd17c26c4da8462efa8975342581a4d
2cb3f101f3327f07baf3bcd509372a6058d871da12ae0661771a5c7c339fff36

HTTP Headers

GET /img/sweep/tokens10k.png HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/png
content-length: 66622
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
etag: "63401445-1043e"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K%2FK6vpAS58pDRx3diyOyLY52XEbw5qfmfq8DCrI9bMgxI%2Fz6EAmn%2Fi1HOIGWqNV4sTANxNbRaaF6p9LGnGgu%2BUVRUkJGY5Rl5WmIC8inuqKdsRyErtQGDrTrGZYZUrpUIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb49fb5f0b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/js/data/rtc.js?v=1

104.26.14.91

200 OK

4.5 kB

URL HTTP/2
promosurvey.org/js/data/rtc.js?v=1
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (10798), with no line terminators
Size
4.5 kB (4524 bytes)
Hash
cd865a123eb36beb19ed85d4cec9c1c5
ecc9bdef3705b4856160961aa2461e590121a10d
477a1cbf6e00d9dbb3cc9ab0adb83d979362ebf6a038a44744a3a8432e8e15c6

HTTP Headers

GET /js/data/rtc.js?v=1 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=14949
etag: W/"63401445-3a65"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cz6nTy6A48cDHPlTP%2BkYQJisXySly2PtwDQLyfu%2BabUvK0TwhewMNJ7%2FjDxgOennHiBJTSHVQkItFldLq8i1S9ZxVaOTEajSqu4x8i%2F69I6A8%2FYWkSsbkyfdm7jN%2FOhHvw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb45be320b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

ocsp.globalsign.com/gseccovsslca2018

104.18.20.226

200 OK

940 B

URL HTTP/1.1
ocsp.globalsign.com/gseccovsslca2018
IP
104.18.20.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
940 B (940 bytes)
Hash
b38d3f636e73eb499ac0f68a20f7a6c3
b248bf4c118f9ec7a3c08c8fe2fb2f17041ec533
7ce3e8de5377ec7d1399cc7897b528e148415a6c1d89b7d3d0b7c970a310e3ee

HTTP Headers

POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 19:07:20 GMT
Content-Type: application/ocsp-response
Content-Length: 940
Connection: keep-alive
Expires: Tue, 11 Oct 2022 16:24:11 GMT
ETag: "b248bf4c118f9ec7a3c08c8fe2fb2f17041ec533"
Last-Modified: Fri, 07 Oct 2022 16:24:12 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 361
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7568eb4ae989b505-OSL

promosurvey.org/img/comments/person-sweep-1.jpg

104.26.14.91

200 OK

3.9 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-1.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x52, components 3\012- data
Size
3.9 kB (3900 bytes)
Hash
72c067fe856886245e7c47c7ff84e041
5210cb05f897db334c61f8971ccec9a7396ea8a7
9a106ad9f340c7bafdd365ea1ad24b9336c304b1e72653eb58e84b5604471030

HTTP Headers

GET /img/comments/person-sweep-1.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 3900
cf-bgj: h2pri
etag: "63401445-f3c"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q%2BDNChK%2FBFg6jSOheammZTH8Seav7ioyRuj741J1mgHAP0avK5Z8JNAZd3Jbl%2FHkBXJtZ53hZ2JuXZQ2qvWHiJf1elRlieG53n4JH5mOGwrSNuC%2B4yDWSIDr%2BeQyGpZ8ag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4aec990b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/unnamed.jpg

104.26.14.91

200 OK

1.4 kB

URL HTTP/2
promosurvey.org/img/comments/unnamed.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Size
1.4 kB (1378 bytes)
Hash
449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59

HTTP Headers

GET /img/comments/unnamed.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1378
cf-bgj: h2pri
etag: "63401445-562"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d5EKJ196B6UkX3noBRnky3917z731IOBAAU%2FCfHoV8OjJ16JVUmHzKUoSedz5brpt4DFT6xGMCbjWb9%2FbmkUolZ8R7IThyTCEJOKiCV6AKhtNHUx8i5uj1Uil54yOOsKxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4aec940b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-3.jpg

104.26.14.91

200 OK

1.1 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-3.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1063 bytes)
Hash
72ab252d8ff828965ad984b8ab16991f
e45ea3665e80feb2e6309b04e1ec2e8d41bb279b
c5d70c3abf95aecc84bcc1b1f9fc25848e690852071169bf57522fd671550291

HTTP Headers

GET /img/comments/person-sweep-3.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1063
cf-bgj: h2pri
etag: "63401445-427"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jLkAHgUjoCe1j3TgQ9T6%2FRuQIWXJBWTxK%2F633zEieBcxXDVRq77cVpf7wFQnhNYW1uo1ChX9vL%2F4ZIGQ9S8NhR6%2FOy0ii273hW8tgsdkHoDPS01aD5NIFfhNAbNADNt4%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afca40b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-4.jpg

104.26.14.91

200 OK

3.7 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-4.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data
Size
3.7 kB (3694 bytes)
Hash
02eebe83bc6786ef27b852477d4c4998
205314ba911137b6f6be4eefd946a2c62229e591
a0038f9d5f6fe1ce8fe1bf1cc7256f05e16c11d27041739c55918b823744753c

HTTP Headers

GET /img/comments/person-sweep-4.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 3694
cf-bgj: h2pri
etag: "63401445-e6e"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XbUYRMG1Wv0n%2FsoojN1zz%2B4WJevZyq8%2BxVYoqr2xvxQ9sAXfeEiCyyBi586FaKPn%2Fwvqw4Pm%2FadMiFWu923Bqgxx9wAhG8pg9ub05j1McuGzAD9PAtXN31kNU2T1M6RJWg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afca50b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-2.jpg

104.26.14.91

200 OK

1.0 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-2.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.0 kB (1042 bytes)
Hash
e489d022a40ba80f51fb5acc1addea46
41c334f49c248783037ceaf6fc335acff62f760c
c39b4bfbcc6aa147547ca922c4f80350b48dbfa59cbd5176f44373e3b20f3567

HTTP Headers

GET /img/comments/person-sweep-2.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1042
cf-bgj: h2pri
etag: "63401445-412"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X3VjnDRzJrW%2B8OS4VABBntkqcx6HzoUje7R3QTjNWSOfFOxFdZIzXbHsBos1rcjTZr3XF%2FMntc%2FQ3nHU2aIWMcIQkVxd4PB6GxXvJqWGp%2B%2BM0Iq0c9E%2Bm4hjvzPU0z65Gw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afca10b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-5.jpg

104.26.14.91

200 OK

3.3 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-5.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data
Size
3.3 kB (3268 bytes)
Hash
92c40a962aa579868b64b8b7f1b6575c
f676f1ce463a7b0b7b2c05587a9b52285e55e679
64e47fb0b1dc439d03463c15a7977d88988a4d3f7d563e3d772cc9ca8d41e414

HTTP Headers

GET /img/comments/person-sweep-5.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 3268
cf-bgj: h2pri
etag: "63401445-cc4"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M2a%2FNvFHTM2ptbxqkktTzvqavmBpFNZalpgktHLAL9HbWlv14nGwGb4Pi0Lara51kLsDUIaOMg%2BovJ%2B0KtTKeY5q2AdOpyvYQJ%2BluUzRZehlZHk%2FG0F2rfQFqLWxHmz%2BhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afcaf0b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-6.jpg

104.26.14.91

200 OK

10 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-6.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:31:13], baseline, precision 8, 50x50, components 3\012- data
Size
10 kB (10400 bytes)
Hash
eecc2c7e1efc1d69f01f47b677666cf2
c4e909b86e22612ca4c5e599c7fc7204573b1baa
92aaaee44b9c6f7f69cd778106927274a9c6f0fec665555be6b020d220207fb6

HTTP Headers

GET /img/comments/person-sweep-6.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 10400
cf-bgj: h2pri
etag: "63401445-28a0"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G1L4uMINiyf%2Bf2LjYenxmex7fN06PSPJVEZa49Lmk1BsF66l986L2E5MGTZyTmqxYzj%2FYAWGkRgVbePI0nMnE6cbixNf1wOpgPB7dksUialDqRv03F7BDr0MqnF3v3Z9SQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afcb30b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-8.jpg

104.26.14.91

200 OK

1.2 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-8.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.2 kB (1182 bytes)
Hash
f60b9c2d018d7a29d014742ae8e36839
1b59e7eec38eb9f620256742f83ae7938ac0bb07
ed7ea3a5c85d0ba010c783b9599441ba28fb4333cf1ef534f6ec07b5d81e7fd8

HTTP Headers

GET /img/comments/person-sweep-8.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1182
cf-bgj: h2pri
etag: "63401445-49e"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BsR9u049TiyqiKNjk%2FUIRLtSrqdTSRBcxnNiwWXjUWuxWwSRSWQRNSlaCU%2FamE886PuM7XrR1ThE4uJdnzsUv%2FtWnKECvDc%2FoKWPTXvQWdtUCG39RAUblDxXhO6pRZC0%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afcc00b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-7.jpg

104.26.14.91

200 OK

11 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-7.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:30:25], baseline, precision 8, 50x50, components 3\012- data
Size
11 kB (10884 bytes)
Hash
583a669aef17441f222db5be083f3750
f869d6bf98c43f0a0a935305096fe637df202687
5afe11e79d5ce7715f2dd2a291c3841d7abc1a62ac89002214f9562f6f58865b

HTTP Headers

GET /img/comments/person-sweep-7.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 10884
cf-bgj: h2pri
etag: "63401445-2a84"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q2c3WbeoV1vHbjdRXhITLOnqAiHZoGnNtnNR%2FBMqvOcMS75nlFte3iKSnp7AC%2FyMfYCNTmRUmdxfD2diZAQPQb%2FfozQx0uZW1L%2BnVCbrQQkeP%2BAxKLncTqWpOcPPe8TTOQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4afcbc0b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-9.jpg

104.26.14.91

200 OK

12 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-9.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:32:23], baseline, precision 8, 50x50, components 3\012- data
Size
12 kB (11871 bytes)
Hash
f950070b2582c8f9202b5d084e91905f
7154a29bb2ecd778435943cf02c88fb9b0a86183
ccfcb58ee86d9df13807286e232dd153f04c84527fd80d5efc2212157cb6386e

HTTP Headers

GET /img/comments/person-sweep-9.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 11871
cf-bgj: h2pri
etag: "63401445-2e5f"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8fCoQbYmoePQ%2B3X7OHCLw1kHlZ3YLaOOGP4df%2B2rlc03vv22RKJgy6Om%2Fsl%2BcIiwINqTlZgh4sYHf55nbKuZd5w%2BTw0K8Ty0DV6rai%2F2QC65XCo5XgimkyF3SR7kPhRbiA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b0cc60b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-10.jpg

104.26.14.91

200 OK

11 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-10.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:33:44], baseline, precision 8, 50x50, components 3\012- data
Size
11 kB (10828 bytes)
Hash
2f7d5d907d9e6d0250afbdbeb7f3cb0c
136703751a36b76b1fe599930ec855f90fde9f23
271e2dabe37ae76b27d28edfeaf49c9a4135f62dd24a3c0ff3387ea9354841f1

HTTP Headers

GET /img/comments/person-sweep-10.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 10828
cf-bgj: h2pri
etag: "63401445-2a4c"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wfJbS7WqcWT6A5qpkZFKhuLrp6kc8uDk3eYiRq2uXq184bBZDU7WQyDHfe8%2F8TTkvO6yF%2BhommQtmp2ktcnp1KiC5LlS9Ips0mZqxDOIoXs4CN%2F1RVhNJjn4vhhYrpJz2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b1cdc0b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-11.jpg

104.26.14.91

200 OK

11 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-11.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:32:58], baseline, precision 8, 50x50, components 3\012- data
Size
11 kB (10636 bytes)
Hash
e33f2bea60761c8f1c4cf8648839692a
14a8b54006c419c85842d96a8a4aeb837f5a0a5e
9d020381e094ab0ae1556c751f9c4af6498cf12989cd9c3605ca91b856cb5951

HTTP Headers

GET /img/comments/person-sweep-11.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 10636
cf-bgj: h2pri
etag: "63401445-298c"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hjYmqYFpMMRqs%2Bv3ekEGWkS61a6Rw%2F%2BSkdnguB8FO8caZhADMDy5njR6w4xreCCGa%2Fg70hoRyjrz48WVocIgb9%2B96rBHSV9w%2FNXystnOx9AMHfynoR5PLeJC2Me3qRxvGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b1ce40b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-12.jpg

104.26.14.91

200 OK

11 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-12.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:34:12], baseline, precision 8, 50x50, components 3\012- data
Size
11 kB (11188 bytes)
Hash
85b4e587433a60e7d3e98b1ef93a71f8
c4c8600ce8a5be2640aacbac866bf8b1f8192f26
65e9048c6b09381baa8056de19ad758b2a302dbbc3fb1cdb509e414ed73c69b8

HTTP Headers

GET /img/comments/person-sweep-12.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 11188
cf-bgj: h2pri
etag: "63401445-2bb4"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8tZrdROvVa1U8rmBoiDexzNHTxb3GCWI47GUTSGSEP7wKE7eGQnLJ9446MJsMGUDNMmmVAKy6DwcWK2mdiJFJx5M0FHUAyyhOqcYab091fqds4tyjckC7kEuQ9nnRjJM6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b2ce70b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-13.jpg

104.26.14.91

200 OK

1.1 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-13.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1110 bytes)
Hash
85059de53011f0ef712a5f4b5dd13219
481385e3fe4b3ec1fd703de246796396a33777b1
7f442be1fc6ab7aa64035207cedeff057625371b7a58d551fda451acee6b4f58

HTTP Headers

GET /img/comments/person-sweep-13.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1110
cf-bgj: h2pri
etag: "63401445-456"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BvJmGmBn6tFHWpm8aeK8qMmvG99%2Bt6eAboG2yZ5Ti062La7s6DeM%2BwD%2Fe8pBtIunhT26NsLPfRNARIIHx2ngphJfj6ZYw5Y%2BDNO7HGzHN3Nbu%2BYywZWOr%2BliqNffMStmYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b2ce90b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-14.jpg

104.26.14.91

200 OK

1.1 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-14.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1146 bytes)
Hash
4248fa5ac54e7b0dfa5a791bd1dbd161
aa880bfbdca2ec69d93fd29606a64bdce6ee830c
174659ceb240363f2d31a6fd392f108ad714a592b0dc3192d1051c42237bf8b8

HTTP Headers

GET /img/comments/person-sweep-14.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1146
cf-bgj: h2pri
etag: "63401445-47a"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wHl7nAylljervYjgodNlam%2FTQuF%2FZp0%2FfzM2bXyvEtt90BzezRm8Q%2BoaKdmB4TWzQNGzoaNVVbExs8IExxk0YhvAEXhLilEf7Zr7wSxevnY1Rfh3ChO1edl%2FDyF59B0f1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b2cea0b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-16.jpg

104.26.14.91

200 OK

1.2 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-16.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.2 kB (1208 bytes)
Hash
9574e9e3f629fc4cc0f470f678a232ca
89412a05077b4eaa423f7790bd5fb4ee3efc84eb
15f660e8aec56d65e9da4efcd552984e5a623c25b8484c3efbdfa7567bdab17d

HTTP Headers

GET /img/comments/person-sweep-16.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1208
cf-bgj: h2pri
etag: "63401445-4b8"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N9YX4nzNe%2BpuseJkM1Mwt6BDIrLswoh7IWBn5Eb6%2FgrvaO0PunEaNG1u%2FTPKp6kLHplbszHsSai%2BkTmKlqyGhrGDrUAng74DLk4UUxrOdvkMu3ftG3Jrgr%2FgH%2F%2F2cvIv6g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b2cf00b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/img/comments/person-sweep-15.jpg

104.26.14.91

200 OK

1.1 kB

URL HTTP/2
promosurvey.org/img/comments/person-sweep-15.jpg
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Size
1.1 kB (1067 bytes)
Hash
ca57a3f68e171ebeb7798679d5fb79ca
688e6a4ffeeae81c9e970e03081de1fe26afac9a
f739552ded4074fa25475c5a5ed9c49dc0a769e791e9916b5d8bcbc044f8818a

HTTP Headers

GET /img/comments/person-sweep-15.jpg HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: image/jpeg
content-length: 1067
cf-bgj: h2pri
etag: "63401445-42b"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 1637
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9bSh5lzcLOsZx9ZOKIR4rwuXpimUCd3JlJoqeN1fH4H%2F88GG9lxUaEd3G4xP5k7ZHY3TteUtxO2jRxu5HgeLWkvfQiXYeQsJUtRCLWdk6FDPzxabxxtS3u2deaUrGfiOuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb4b2cef0b39-OSL
X-Firefox-Spdy: h2

promosurvey.org/js/config.js?v=8

104.26.14.91

200 OK

22 kB

URL HTTP/2
promosurvey.org/js/config.js?v=8
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (65536), with no line terminators
Size
22 kB (21556 bytes)
Hash
17fd8e3b88963effb7232eb2aeb57cf6
1c5ea9d48765190dc4a2e10680017859249db547
41b74d48e2acfe87063cb18f945b1722f46df9976a18ec470d0888c40b931f38

HTTP Headers

GET /js/config.js?v=8 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63401445-1085d"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iLO%2FHAYn51GB2Sq72LjrwF0rTppqBvfm3egwMOeXBSPO4eZm5Ggdxfnl79XrrqBZRwzR4kCk0nR9shZzMsaYE%2FPKDo49bgRnxUJq08iIbRPpvH31yI%2B9OdPxRcQDn2ICsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb45be340b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

mc.yandex.ru/metrika/tag.js

93.158.134.119

200 OK

73 kB

URL HTTP/2
mc.yandex.ru/metrika/tag.js
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
Unicode text, UTF-8 (with BOM) text, with very long lines (731)
Size
73 kB (73219 bytes)
Hash
64adf2282f72dc350e916cb82af41ab7
d5c10f65a7ac0cce6eb0c78df805965a9a3ad017
4942011d5f3623476ceff936e757245d89ce2af664558a7031497d370a3d3771

HTTP Headers

GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-length: 73219
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: *
etag: "633fab48-11e03"
expires: Fri, 07 Oct 2022 20:07:20 GMT
last-modified: Fri, 07 Oct 2022 07:30:00 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

ocsp.sectigo.com/

104.18.32.68

200 OK

471 B

URL HTTP/1.1
ocsp.sectigo.com/
IP
104.18.32.68:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
471 B (471 bytes)
Hash
fb7c213564f3d5b3d1d7ff76b91f78ba
6cdba6ae4c57b17a081f03e8d1c4ea0c8790982e
9a4e59a394d8fe0065332cc2dc6cfaf2989c1d89aa1414c58307cbbe1f95bbf9

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 07 Oct 2022 19:07:20 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 07 Oct 2022 13:33:15 GMT
Expires: Fri, 14 Oct 2022 13:33:14 GMT
Etag: "6cdba6ae4c57b17a081f03e8d1c4ea0c8790982e"
Cache-Control: max-age=584153,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7568eb4c4999b521-OSL

datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a

139.45.195.253

200 OK

12 B

URL HTTP/1.1
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
139.45.195.253:0
ASN
#9002 RETN Limited

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Origin: https://promosurvey.org
Content-Length: 1523
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Fri, 07 Oct 2022 19:07:20 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://promosurvey.org
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true

mc.yandex.ru/metrika/advert.gif

93.158.134.119

200 OK

43 B

URL HTTP/2
mc.yandex.ru/metrika/advert.gif
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

HTTP Headers

GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: *
etag: "633fab48-2b"
expires: Fri, 07 Oct 2022 20:07:20 GMT
accept-ranges: bytes
last-modified: Fri, 07 Oct 2022 07:30:00 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29

93.158.134.119

200 OK

400 B

URL HTTP/2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Size
400 B (400 bytes)
Hash
6b5516eca31dd0c0d30def8841fd5476
710408bd4103397a1be1cf12a7391dabc64d3d9a
8cb4d74393ca556b20071e2dfb5f519880b7a81cdee8750630a83ab824e50d51

HTTP Headers

GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 400
date: Fri, 07 Oct 2022 19:07:20 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://promosurvey.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonSurveyStart&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A859516052%3Arqn%3A2%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C911%2C911%2C0%2C%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)

93.158.134.119

200 OK

43 B

URL HTTP/2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonSurveyStart&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A859516052%3Arqn%3A2%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C911%2C911%2C0%2C%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2)
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

HTTP Headers

POST /watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonSurveyStart&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A859516052%3Arqn%3A2%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C911%2C911%2C0%2C%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(2)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 40
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: https://promosurvey.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonUnique&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A122517568%3Arqn%3A4%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)

93.158.134.119

200 OK

43 B

URL HTTP/2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonUnique&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A122517568%3Arqn%3A4%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2)
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

HTTP Headers

POST /watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonUnique&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A122517568%3Arqn%3A4%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(4)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 37
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: https://promosurvey.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonStepChange&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A37292646%3Arqn%3A5%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)

93.158.134.119

200 OK

43 B

URL HTTP/2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonStepChange&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A37292646%3Arqn%3A5%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2)
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

HTTP Headers

POST /watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonStepChange&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A37292646%3Arqn%3A5%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(5)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 43
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: https://promosurvey.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonAdexCall&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A718426671%3Arqn%3A3%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)

93.158.134.119

200 OK

43 B

URL HTTP/2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonAdexCall&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A718426671%3Arqn%3A3%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2)
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

HTTP Headers

POST /watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonAdexCall&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A718426671%3Arqn%3A3%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(3)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 16
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: https://promosurvey.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

promosurvey.org/sweeps-survey.html?utm_content=zd_public_v2

104.26.14.91

200 OK

17 kB

URL HTTP/2
promosurvey.org/sweeps-survey.html?utm_content=zd_public_v2
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1170)
Size
17 kB (17333 bytes)
Hash
73993e5a9417138bfdfdf9438c68c5b7
7517cfd9fb3ce41c800875e5a56909a67f89cd17
15b2909fbce15386c98889e3d4f176ef9ebb7c1b8b5614b3770e31da6bdc6bd9

HTTP Headers

GET /sweeps-survey.html?utm_content=zd_public_v2 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: text/html
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hMuJqEsNQzYVfo4JXHD7SBQ5r7sEh0qrfwSpnrvSUhlXxlERjcti2FY3mK289BeW9sB3mzImqWU%2FWd6OSRLYu7O6kPG3ObAAbDoZzw4JS2CdsnPf5xF4Ycov%2Fw%2BQH6petA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb473fd90b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A511832892%3Arqn%3A7%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)

93.158.134.119

200 OK

43 B

URL HTTP/2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A511832892%3Arqn%3A7%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2)
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type
GIF image data, version 89a, 1 x 1\012- data
Size
43 B (43 bytes)
Hash
df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87

HTTP Headers

POST /watch/66423859/1?page-url=goal%3A%2F%2Fpromosurvey.org%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1665169640_b130c1248639fb7d32747361de6e56f6d2ffcc4fe030d9eb8b2096cacf1b1166&browser-info=ar%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169641%3Ac%3A1%3Arn%3A511832892%3Arqn%3A7%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ans%3A1665169639524%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169641%3At%3ADear%20user&t=gdpr(14)mc(g-6)clc(0-0-0)aw(1)rqnt(7)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 50
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
content-length: 43
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: https://promosurvey.org
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4957
Expires: Fri, 07 Oct 2022 20:29:58 GMT
Date: Fri, 07 Oct 2022 19:07:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4957
Expires: Fri, 07 Oct 2022 20:29:58 GMT
Date: Fri, 07 Oct 2022 19:07:21 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
e825fc3ba1ec6c169fbc10ffef8dffb0
6bf9cffa8468b37068aebed5a43dbc911086fc84
b0c59e715d8c38c061cfa06ec64c69f442f9417d6bc9c76e393c1fa00b11af86

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0C59E715D8C38C061CFA06EC64C69F442F9417D6BC9C76E393C1FA00B11AF86"
Last-Modified: Wed, 05 Oct 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4957
Expires: Fri, 07 Oct 2022 20:29:58 GMT
Date: Fri, 07 Oct 2022 19:07:21 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg

34.120.237.76

200 OK

11 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
11 kB (10987 bytes)
Hash
53b7ffdc3799e0ac7a225145242579ef
c47f0525fe5354ee13fe63c0ec31f0f826a58005
4bb518afc9b3e7bfb976d343e46b306155834adbe71fa35b0d6f509959f78aca

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa0b7bc4b-b79a-4bab-9bec-87695d757b08.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10987
x-amzn-requestid: c2ab1012-1afd-4d74-8114-97977b43da24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZgCHwGdGoAMFvyg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633cb097-3237927a0c1e081d22c902f7;Sampled=0
x-amzn-remapped-date: Tue, 04 Oct 2022 22:15:51 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: JYDg0-KelCPr__4bKtpARLrwiE1CHGICcFI6I9_TFCMcmESbykNhXQ==
via: 1.1 3dde68f1f52282c9e1ee336d97233b0a.cloudfront.net (CloudFront), 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:50 GMT
age: 75511
etag: "c47f0525fe5354ee13fe63c0ec31f0f826a58005"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8.4 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
8.4 kB (8445 bytes)
Hash
4572451a09430ca7a9203f14ddc035ba
46e17c44fba23988d7a9d9832c411ba2810136c3
fa54e73c4b32d8e109504ebcd46e4316de8143f44b7eae20a44ba63d14a6f24b

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7758caee-c969-46dd-96d0-b4402437781d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 8445
x-amzn-requestid: 7d295b3b-29d6-4b2e-8314-c9055d1def80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmju5FxwoAMFeQw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4cc5-3f58c18b1159ad512c60422b;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:46:45 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: DC1ECXhkAhfdrU8ZyMhhDdwydsq4PQfzzGOPd-REjCkCsDbXQLnLiA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 34c44cb7892e57a3b6c51812bcf68ee4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 22:08:57 GMT
etag: "46e17c44fba23988d7a9d9832c411ba2810136c3"
content-type: image/jpeg
age: 75504
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.0 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.0 kB (9046 bytes)
Hash
7e30ca5022768294665070cafc9d489c
c6ebf53c21206cfcf8e70279d3ae43f0170ade3a
6b834cdae692318a114c0d82ebff4fa8f4e65526983758e08ffb130d4d86020f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0135ba0-9033-445f-8155-a6c093862ccb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9046
x-amzn-requestid: d560c8ba-6e81-46f7-a451-30c40fbfce6f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_F7qIAMFkQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-012e65d675558ec8544a1f30;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: Vy9jQu1a8BGypY4C4u_9gao5wPEkVHgArhG2zMNdH8KfBS0lfmyHBA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 57bd3a2d9e0e4cbf89d9eb3d7dfb916e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:43:40 GMT
age: 77021
etag: "c6ebf53c21206cfcf8e70279d3ae43f0170ade3a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

13 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
13 kB (13437 bytes)
Hash
16339989f5c6c229a3dcc0ed1e52032f
a1ea26d6e4eb4a72cc8c87100b40035dab69d285
16703f888ee6f974bb89e1c4c16a75186b31b64130abcd1a3bcd3741159d912c

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9ca4df15-4ecd-467c-a658-2352fca9a8ff.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 13437
x-amzn-requestid: ec801fbc-c339-46ce-ac5f-18d064e5ef21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_HdeoAMFyOQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-02b52b770e6e76cf52b26e47;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Miss from cloudfront
x-amz-cf-id: Iesqk_XbGiZE-n3mTa1_1WtlXiyEqz-4qfyt3_609O1eujdLcFu3zA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ece5d4a731ece5ff46c564ab2b946ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:47:25 GMT
age: 76796
etag: "a1ea26d6e4eb4a72cc8c87100b40035dab69d285"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

7.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.3 kB (7261 bytes)
Hash
ed3fa86bbe319c9a2f81ff625e677cb0
e3d5210207f6ff922bc28e328285059c19a523a4
5919694bd942a4f25d5b7ffc3f8aee1af6cdb8461d4ba3dba9a2e72cf19164c8

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F38d969a0-82cd-4d27-8f25-f1b95cacc89f.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7261
x-amzn-requestid: e1bdf299-b29e-4f58-9c8a-33f5dacdb081
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZmirBELYoAMFfgA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4b13-1969b32c6f4f7e5749e7caa0;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:39:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: FO5iGJFmDfdklhzIVOxp4x3AV7ltFqBDDlYBz39Zzx99t7oykNR2WQ==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 a4479a6315f90864adc6175b280f8f44.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:43:40 GMT
age: 77021
etag: "e3d5210207f6ff922bc28e328285059c19a523a4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

12 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
12 kB (11492 bytes)
Hash
f2ac0ed19ef64f2f765ce7adb2a8fa7c
b6ea582befd01324dd456d59d3f610101dcf910c
d324c9f67b0efc38a935195076488dd0a62f61b893706ecf40ad1f2c5550a7d0

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F90038edb-d110-41cd-98e0-d47715e9135b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 11492
x-amzn-requestid: 7ac7e364-5204-4101-87f6-89fbdf3c5cb0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Zmhi_GKSoAMFdkg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633f4946-4ae692e2617657225c88e5fb;Sampled=0
x-amzn-remapped-date: Thu, 06 Oct 2022 21:31:50 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: trKPg7J7s_BuMlog8HXU2ipo4dQlR3RAJ93KqFxf0BhcrzB8FDx3_A==
via: 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 25b9a991f871f75614e7f92f97b136a4.cloudfront.net (CloudFront), 1.1 google
date: Thu, 06 Oct 2022 21:43:40 GMT
age: 77021
etag: "b6ea582befd01324dd456d59d3f610101dcf910c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

promosurvey.org/css/survey.css?v=1

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/css/survey.css?v=1
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css/survey.css?v=1 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=19835
etag: W/"63401445-4d7b"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w9X7XrnA5gVK1KRYIMKeupdJop%2FA6MqbL3%2BPq1GdTGTOCQ0KbslzBZ0%2BXKVwVRL0MsVHcDimkFg8iu651LwFmrHwLgZuXWlHMse0NHTPQC5VeRWSIYuBPQUqH9adWeThsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb45be350b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

promosurvey.org/js/data/_global-config-sd.js?v=3

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/js/data/_global-config-sd.js?v=3
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /js/data/_global-config-sd.js?v=3 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=651
etag: W/"63401445-28b"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Vwf3z4TqxnfZogkBVZ7UIO0pbwLfmftF%2B5x2rkW0g56kUAJCRvDNy4s0tVMfgFv54ZqfXAIt8BXN6cPyvUTUnlEV5HSVbWdccgmw9X9iJxDXQsAtmQWmofzSb5e%2BVaq6zg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb45be300b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)

93.158.134.119

302 Found

0 B

URL HTTP/2
mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2)
IP
93.158.134.119:0
ASN
#13238 YANDEX LLC

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr(14)clc(0-0-0)aw(1)rqnt(1)fip(1)rqnl(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://promosurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fpromosurvey.org%2Fsweeps-survey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Agdpr%3A14%3Avf%3Akqp6gvxtrlkq3u3woc7b0%3Afp%3A358%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A912%3Acn%3A1%3Adp%3A0%3Als%3A1185245021126%3Ahid%3A606487219%3Az%3A0%3Ai%3A20221007190720%3Aet%3A1665169640%3Ac%3A1%3Arn%3A610298952%3Arqn%3A1%3Au%3A1665169640381752945%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C130%2C0%2C%2C0%2C%2C193%2C2%2C%2C%2C%2C462%3Ans%3A1665169639524%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1665169640%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29aw%281%29rqnt%281%29fip%281%29rqnl%281%29ti%282%29
date: Fri, 07 Oct 2022 19:07:20 GMT
access-control-allow-origin: https://promosurvey.org
set-cookie: yandexuid=4532418151665169640; Expires=Sat, 07-Oct-2023 19:07:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=4532418151665169640; Expires=Sat, 07-Oct-2023 19:07:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yabs-sid=260325101665169640; Path=/; SameSite=None; Secure
i=BJIrNi2GFgd7ZayNqTWikrUDOZXeIjwnHgimuLhl96ykur4wbbmNDahWicY3KUZmVd5hIkzW5BsTisbFv8aZb+KFyG8=; Expires=Mon, 04-Oct-2032 19:07:12 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
ymex=1696705640.yrts.1665169640#1696705640.yrtsi.1665169640; Expires=Sat, 07-Oct-2023 19:07:20 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Fri, 07-Oct-2022 19:07:20 GMT
last-modified: Fri, 07-Oct-2022 19:07:20 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2

promosurvey.org/js/dict/cookie-consent-1.json?v=1

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/js/dict/cookie-consent-1.json?v=1
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /js/dict/cookie-consent-1.json?v=1 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/json
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
etag: W/"63401445-168d"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R79q%2Fxf5GVsZdcdqX%2BiNr8rwKio0rgDuzeFAM4Y%2F1zRrTTl8ogtv%2B05t%2BMRB%2FV8A4o0YVocTYFzjgZWbDfZZapuxHmwkmYhGSm8Sh%2F%2Bx2QXunsGdUIo8HwVxKgz0poBkDQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb475ffb0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

promosurvey.org/sweeps-survey.html

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/sweeps-survey.html
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /sweeps-survey.html HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: text/html
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L%2F0Kvw1My9089LSFmy8h9tnFfaZ6AEY2l749AltE6%2BDYlpbZq2Jj2aL66RYUH12nxBT%2FY9M6%2Fy9qRTHA5OfUfvvP%2B1NVajFGfereprP0Hsr%2FswHFDTScPwb9sQ8OtRBzGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb440c440b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

promosurvey.org/css/sweep.css?v=7

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/css/sweep.css?v=7
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /css/sweep.css?v=7 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: text/css
cf-bgj: minify
etag: W/"63401445-f45e"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r52qTXnTbLfj00X51auYULnyFZjd0Y7gLhHWNpx62cPSchTco%2BC0R%2BBeGlMoV%2Byv8KXWk1AqeJhJPLIMV%2BkZootAIHR8EinMkvPuKRxoD6%2FP2cTTT8bFS26I%2FmtJLdjwmA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb45be380b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

promosurvey.org/js/sweep.js?v=4

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/js/sweep.js?v=4
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /js/sweep.js?v=4 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63401445-90"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FPRRrJr2x9yP2jINS%2FKnlhh5AARe282ng0qQCP9A8K1BR%2FDSL1%2FVY2Aq8WRng0MKkGDgst4he7Vmw2wthPrBnVt1X%2BqeF1NT%2BY%2BaRnpR%2BaZ36gS4pZqJIKn2%2BNcmiEuUlg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7568eb45be3c0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

promosurvey.org/js/survey.js?v=14

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/js/survey.js?v=14
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /js/survey.js?v=14 HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:19 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"63401445-4a5a2"
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iGWQlXkCAnjM%2BcDLXwNYcEJMRPCqeM6Ya9NQOSjUb0JwNfG%2BPyS7NjOnwbvTP14Mnp8LJqJ63h5HRzXJAqPZbjBfXtYSqohwYE0xQPjouCp7nCGNfTzGLJYegPX1HkGyAg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb45be3a0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

promosurvey.org/js/comments/en-sweep.json

104.26.14.91

200 OK

0 B

URL HTTP/2
promosurvey.org/js/comments/en-sweep.json
IP
104.26.14.91:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /js/comments/en-sweep.json HTTP/1.1
Host: promosurvey.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

HTTP/2 200 OK
date: Fri, 07 Oct 2022 19:07:20 GMT
content-type: application/json
last-modified: Fri, 07 Oct 2022 11:57:57 GMT
vary: Accept-Encoding
etag: W/"63401445-12f9"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2F1s1rmFsGgoHIuZgj3tFHvzXlCjhLjy%2Fc8thNUBiCkBs295RtZTwiUQ1ixNuTfdts9btW6PGLvPzOfkKUpHtyzlaFC2PE4eHgwlRhWJ0J0asBXRyKYnDl%2BqPdLpY7ZK7g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7568eb49fb6c0b39-OSL
content-encoding: br
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (13)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations