d31.jeezuquesurvey.top/css/_core-survey.3c68fa3a.css
200 OK 40 B URL GET HTTP/3 d31.jeezuquesurvey.top/css/_core-survey.3c68fa3a.css
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
Hash 22ba977e197d03c07033423879af439e
c4961539877966a91d559d729ea194646f1e2366
8aab52111a37350ec978dacea2b7ffc5acdac5fde4c7fdf4b2a943204af3efe1
GET /css/_core-survey.3c68fa3a.css HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: text/css
content-length: 40
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-28"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WVBCUNsVSahjODstWXlqRtpMMNsaLfmWszPVHsypVozU%2FEYGx%2B9KDQabLB8sNCxAqjvNBGf3XWYW%2F%2B%2F%2BI0Th62TD%2FvNLZ5%2BRr0dUQWXhAFO0%2BrIMTrszK3Qs81kdUlpD5PiLLPg8vfZ2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9756c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/v-react-dom.production.min.js.a7fbb032.js
200 OK 42 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/v-react-dom.production.min.js.a7fbb032.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (65440)
Hash 388f2e01338123344e9f35b614722f87
8fca8be07faa1362772f9dff296f870eb86b6f85
40266a95cf00a1ce7054e4cdc1db98f1a591781ec41f75b568e6305ef0805e8b
GET /js/v-react-dom.production.min.js.a7fbb032.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-1f94a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qJNrEeaBxrgOlAxSx4nfbwbvv3T6R78doQiIq%2FIEiN50AVeGYlLdTdOd1GruOGD6ROuXId7nMqBMoO0Rv17jPpw4LE2y%2Fpch4LxUwNdF6izoU%2BcWpQBbPuUgGyie58kHDxVKvdAZTD17"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9456c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/finance-survey.html
200 OK 3.3 kB URL User Request GET HTTP/2 d31.jeezuquesurvey.top/finance-survey.html
IP
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5561), with no line terminators
Hash 6eac8310d53e41bdb623f47fcb985b50
e8b19591ffdecf8d056b1769eeff452f23088071
6569091139db56353af05c91d88b4f3a4e6cb3b382a3419c0b4f3c8fc5f89ae3
GET /finance-survey.html HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: text/html
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UZoOeoUF0fZNfVyANxPn%2BTcX%2FVlTpjsjALcGBDIYE%2FPwd0oJyUQcFTzUFgK0DMUoMmtRzITDame%2FyeTrC2%2FIma1mwVWrlJEifz%2FMlTPozf2eXl3yWzBIZhA3iI4vDVx34b4Anc6vxVoD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f283f190b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
dortmark.net/sync-do
200 OK 0 B IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:20 GMT
content-length: 0
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 618
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: b16bfc8fc0f3d9ee9fd33c72bcbc0bd2
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash ae50dd0b146eaba47d6875ee64e98171
12f1c80bcc2972dbb73c578b8169b7441ed10c29
d070845e05c34fa765452de8e6b6cab85a557b35daeabc235fa46adc4f942307
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 13:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dortmark.net/sync-do
200 OK 179 B IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 1e81b61e56dacec8550f0ed988afe8db
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?render=explicit&hl=en
200 OK 558 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 645cd6634a9669f2b068dbef1be646a0
de9dc91e6daede1d27cec2a2a6aeff03b782b4c6
70a12392169d94b68992cde2d6d35122f73e4c9cd3ed1f3d223dcceaf9da08f4
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Wed, 20 Sep 2023 13:43:20 GMT
date: Wed, 20 Sep 2023 13:43:20 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 558
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 749
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3d55b166202ecc5ddde39f7b3280d65b
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
d31.jeezuquesurvey.top/img/comments/person-1.webp
200 OK 1.1 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-1.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
GET /img/comments/person-1.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1122
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gcWnBFPUETWEmalystzhtbCjwT%2BuwqfS8Y81nzmgSq86BQyUO191vsMsFza0cuMAaugcrmDZN18LJ1Cs2WT3tDYC%2BtSK7s4Z7hY4IsSPKarKek0r%2FVqHJuQXni6XoBI%2FuxGHO0KM2BKM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f300f9656c1-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 64974e31d5d11a422a43482c1cc264fe
29df1e5938da864a59478f5aaa0b25c197a5b097
1c96fb2945985f7073b63e5249b8557af232bc52229fa5a1230317c17b8736c4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 13:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d31.jeezuquesurvey.top/img/comments/person-14.webp
200 OK 1.7 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-14.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
GET /img/comments/person-14.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1672
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h2x3yT0tq%2B2qTqJ6HPm1Fp9mcmZEXyJVXvDMy3SwWMcbmyq1c2Dlii08D1eVIGp91nsTwlx7agvylV0Ed8woE2eHLeJu%2FH5Km6dNazJB%2FmvMoYkdarB8gMibIv6TRefUTdM1QGQiqwqP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f306fff56c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-12.webp
200 OK 1.4 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-12.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e
GET /img/comments/person-12.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1390
last-modified: Wed, 20 Sep 2023 11:48:55 GMT
vary: Accept-Encoding
etag: "650adc27-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jF%2F3HUEDGpF6wch0TyxCYRD5iZ%2Fup7ikU0aFwbJ1w5shZIHXiyui1379kxCqQZ5ekcQjVyDVQR%2FY2%2FtBcf%2B37JFUrXZ7JLo6T6kNXmnxWnQdOfVCrufSdlpfHyoax8YjsyxVescAQceP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30781556c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-4.webp
200 OK 1.4 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-4.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
GET /img/comments/person-4.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1356
last-modified: Wed, 20 Sep 2023 11:48:55 GMT
vary: Accept-Encoding
etag: "650adc27-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pj%2FF8k%2FZnRqh98YJvlSJUKDKzlsuQO0qKdgGq1kCI%2BsVF4PAEAQBQXVXZKq7YzZSk%2FnnkjXKeVQx6dMJXKO9YOvkP%2BH0PTp3%2FfcdadkQvj9QQdT6j9sSr1bi6xeoLFmlzp86skb6dA25"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680256c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-2.webp
200 OK 1.1 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-2.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
GET /img/comments/person-2.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1104
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gFOzu7fOf6W76Fn9ugSlZvsljXZ9lTE9akLmOcJYRIMPTriRd6x2DmTvrtEIpZLa6YE%2B3EJ7mC%2BaqXc3fIe5kMhfIvpZLXOf1aDKFtc5yUSvWbf26Q0NEzo3QV6x91CHyZqxJUOm1C58"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680056c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/survey.9ba0d360.js
200 OK 10 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/survey.9ba0d360.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (6056), with no line terminators
Hash bf970481c292d02f4d54a35a380e04d0
a7a4981ae88714d808592c7e0c6ba5e194a4afb3
0a01eed1c36b62c8442d96789b5b15f7dc607605ac901dc57250177b0b48c1ab
GET /js/survey.9ba0d360.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-17a8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EX9UiwLiqS7iIwJv92Z1i5FCTeHxx9ISmt3iRXPiCG4ZhJ06WHSnauPa471npu0R6epABLdsD%2FZGsBk16umCWp5VPOcfMfgOK6uRZNy5wwci4h6oQPleU2b4MuNNjdDyprMh4F1Co8ln"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9656c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-9.webp
200 OK 1.7 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-9.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
GET /img/comments/person-9.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1654
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H4%2BMIn%2FE%2BehOBA1k%2B9dMnix38Q15m164U7M9rNwNRHz3g6zWmwkg2UTbJqcQjJie%2FCuC6v02VlrOTNhyyeFL7tYKEXfYwj5vqgENJ9HQ8syO6rkD8cr%2BD7rE52Fzw5gBDdbemx8W44c9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680f56c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-10.webp
200 OK 2.2 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-10.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332
GET /img/comments/person-10.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 2222
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zGxCG1cT7JeCJYgxG2%2FHgKZ3vYBoRmwEGj9JavSFIHqYtNjdVKQSq%2F55jaaSOCuOMVsMRbOfx9HCbIllmFrq9TFHz5SzZp%2FOTKSE0WQlmMTRCW8Rp%2FFy6cRiolXB%2BECEO8mJ%2FUelHmeX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30781056c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/_is-browser-supported.20fe6c2b.js
200 OK 3.2 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/_is-browser-supported.20fe6c2b.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (3788), with no line terminators
Hash 1515b270739bc11a28925d5ea66ca1df
ccc4b99b7d1f57aa74685ecdcef502179c97c72a
a365cc42c89dacaef62b1648e00f0b72fa6de7ebc9b7df375ec6f29563da8faf
GET /js/_is-browser-supported.20fe6c2b.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-ecc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JpYbZ8iMb5HsMgsf2UQ0WjO8HnJl93OjZiWO%2Bw%2Fp1jRH2LV28LJYeO3nvCiOoHBYRPOQYyYYUpNJt1gSYBJl80uWtp%2Bnk51%2FVpWHhpW38lq1KKmkr%2FGGloZSzsjSb%2B43vFBo38IrnkRi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b3b7b56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-3.webp
200 OK 982 B URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-3.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
GET /img/comments/person-3.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 982
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yKiNxWZwQj6W0prjhJge1GQj%2FzhZ1OpLkaYHP4Vv2YRTKOCmn3ago82OaaRTOwYCpNC5aLqCH3e8oN7xeE1l1taon27SR9KSV%2B%2BOlb%2BxvPFHWG%2BCyEvOFr4epUb%2FBBJu%2BF3M8cMorHD6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680d56c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/v-index.mjs.c6b8f796.js
200 OK 9.8 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/v-index.mjs.c6b8f796.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (35191), with no line terminators
Hash a7f1a1f90ba847a9df1cf8f820bb0df2
4e7e1313164829dcfdf6da6f817f40244e02ffda
b661fc88bf689df1b62710ede388dd6a28f5aafa7a4537d7768a490dc47bb271
GET /js/v-index.mjs.c6b8f796.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-8977"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=svlzTHxKk%2B%2BIojbxlz1fo8KSnJzqEpSGCMtVrcpbPcjQswWQVmAFL%2Fd%2FouSRSLSfTFuAdNcNs6MO2ZTT1%2B9lb%2BVg53JOeNKjS24wi0Z4RNHhbwaWyxWGT%2ByBQb3pX3dhl5ZL2gsDTfSB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9356c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-6.webp
200 OK 1.9 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-6.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4
GET /img/comments/person-6.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1854
last-modified: Wed, 20 Sep 2023 11:48:55 GMT
vary: Accept-Encoding
etag: "650adc27-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qW1Qd%2BY7mlhhvIG5H1VjVfMgaH2dbdCcE2zXt6QtMDez5dF%2B%2BwmtRzUPCePGig6LnG6K98CU1z3f4UfsU1ltyeopI1PZP0yIsOTA9SLxKRvdXoit8KJkwzGeIdvJQgFsRE%2FprznugBY9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680856c1-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 13:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
d31.jeezuquesurvey.top/js/config/comments/en.json
200 OK 187 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/config/comments/en.json
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Size 187 kB (186787 bytes)
Hash 78839fd14b7a4af467f2af5e01fa3e78
6caef62470c7af62bff2f68158df90ff3d7944b0
e7c39794bf2d944828bebc5f9cb494b6377a69e40d506918ee52a7582794fefa
GET /js/config/comments/en.json HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/json
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DHBqJkCKNBahrndDzpcJflq6sBWrFCDxYShNyKcT4oD9cq5oi9U%2FEHZaPOSP7s6tyEjwSV%2FdCKkN8ojK%2BKA2tC2l%2F49JClhsM5ytebiChBmHeYmhRv%2F8o5qrfGc9Q4%2BHXxYen3uJtPZS"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2e9e5556c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 699
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: ebb3ca214fe665a78cc3c8d665718943
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 13:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
471 B IP
Hash bf2ff9fe48c606169e16ece0c74a3137
6cbb7558a6cb9bef14f355adb55746db54e71cd5
ac8cc7415b293daa75aa9396ea2b2fb617c944a1259aa94443fb80f6626047f3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 20 Sep 2023 13:43:20 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 19 Sep 2023 15:22:13 GMT
Expires: Tue, 26 Sep 2023 15:22:12 GMT
Etag: "6cbb7558a6cb9bef14f355adb55746db54e71cd5"
Cache-Control: max-age=523971,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 809a7f3308810b55-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1359
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 20 Sep 2023 13:43:20 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://d31.jeezuquesurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 700
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:21 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 2d5003f31c528fb83d66ca1a97495130
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
43 B URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:35 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh; expires=Thu, 19 Sep 2024 13:43:35 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
d31.jeezuquesurvey.top/js/_each-land-config.fdd6ad48.js
200 OK 74 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/_each-land-config.fdd6ad48.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (65452)
Hash ad64d2954d2cd2823822c61672393255
e3bb49fe6a7b12d1cc1ac8fdf656e16777c27b19
f291324956b30eb3d1eff4b4fefd1bcd8326b2582a3cc88db2b566b6b41895f7
GET /js/_each-land-config.fdd6ad48.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-11fb2"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=keaviqhwGFoZoVHGpHyHmKM0Ulx2WQBYYc0ZXw6tzzCAG0OWmPQmVTpYAho5EtroLBdII%2F%2B2wQofJtSTLhphwWyRHyxf0sBx0n93aJ65nubzj0Vl3SAPzzrY4ZiUUU%2Fw5GG5Kn8if710"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9256c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintB4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1
ValidityTue, 25 Jul 2023 06:29:27 GMT - Mon, 23 Oct 2023 06:29:26 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 1b19a1e6cadae918e76d6996c48096a4
863ca119a707ec228d7110500fa319c02fbea238
6d897b1e9b3cb258223f873dd32e88f2f544b834355d79374312fa08c7761a77
GET /gid.js?userId=tv3kmwqvknfc5mtprseyvqdd3yhjeswh HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://d31.jeezuquesurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh; expires=Thu, 19 Sep 2024 13:43:20 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
d31.jeezuquesurvey.top/js/config/data/sd-1203056.js?v=10
200 OK 8.0 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/config/data/sd-1203056.js?v=10
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (8495), with no line terminators
Hash 12431367966944827c4c2ae11ca2109c
6d849c10d9d47ce67b7d51a5cd4fed0dc23136c2
f16757b712b32bc30731546035f271087fbec831338b54f6cac5c6f88b0425ac
GET /js/config/data/sd-1203056.js?v=10 HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-1f36"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hpIK3iacRhL02GzdQEh%2FrZHenEq%2BIy0f3wnc1eordxOVjiAWQBrSD06u%2FEixLuzteeIgUhs6bW5PkSos3AuMOP4nxgxlQyeqeNlQCG4ntWWtnAs28%2FZv0e4t3uiS1VAYbhqzyirR3hoG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2cccbd56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/config/dict/cookie-consent-1.json?v=10
200 OK 6.8 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/json
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wh0c2xAoKjmijlbsyRnLN5KCfdMGlJC6y9ZAyu22Sbldox0%2BxwCfYhHiEvxWwyE6B8WtmXz2%2FHndq0lIXpzremwKjk%2BxPm%2BxKoWa6S5M3esQkFmFkpG4laEq%2BMHuXEmwd6s2Mv2uQ6Ra"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2d3d0456c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/v-index.js.d9dcfeb7.js
200 OK 41 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/v-index.js.d9dcfeb7.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (40808)
Hash 83f77544ada8a89e4cd0f2e23b7ecf89
bd0dca177cb2fb792d94d104541b4bc182d32835
1a3b963fab50445cff78e9750c1863c23a6dc6f8ae9151d4a63f938d44484b46
GET /js/v-index.js.d9dcfeb7.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-9fb5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L1S7i9RppZzHwcok9EnTEz5jzSYrawgZ4Rdx3Uxo%2B1vHhfB8G%2B5H8VHxlo1igtvBqJVqSYebyVrXBLwg616RhjT3YG3GVLPf1%2BN8PZCJ1kZb7um5T5rEpTChv7jZQv8XNM%2FpI4QB1vdQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b8a56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/v-redux-toolkit.esm.js.86d657a2.js
200 OK 11 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/v-redux-toolkit.esm.js.86d657a2.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (11315), with no line terminators
Hash a4fe018340af9bd999c47690bff0c0a3
5c64261d732ab851676fb5480733bc7a3a9f8a9d
26608974055030ac39ff50090c78dd6d4ab237908716255f07c064a0ef4ab6d2
GET /js/v-redux-toolkit.esm.js.86d657a2.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-2c33"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6LtKd%2Bb1xC6ovFHG6fU6nufc43FGlcOSL0ztFt1i1E%2FRrqt%2F8BacF5xFMSgSs0booQYJJGWPkWP%2Bw%2BQfGj3ilVXRXN0%2BYIPI%2Bi2%2FdVXoWyHSM%2Br5w3%2B4qAN%2FHk%2F6T8rfbyaxulB8SljP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b8d56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-11.webp
200 OK 1.5 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-11.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
GET /img/comments/person-11.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1526
last-modified: Wed, 20 Sep 2023 11:48:55 GMT
vary: Accept-Encoding
etag: "650adc27-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Z2ylsamICbR5xu1TEUvHcA6pUrkg0woMlRm8T6bh3tYk%2BsMTB2xf6T8F0%2B%2BbspOKZSngHQ7eNntSkbXF7%2Bqk9BkP9t2dFgT2WwJ4cjvCD4MQmssuxT8o7ObIIvTNhbDUQZOYdqNQrC%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30781456c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/_rtc.c0e8ac28.js
200 OK 12 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/_rtc.c0e8ac28.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (12113), with no line terminators
Hash b0e3f3ac63204a9283d945931e510144
8743a8f2cce7f30907ee5c618302041c5c475cc7
fba2de6a56a4a11e132749f0790723eb4dbd54d992a9d3a8ec28a444d3c46ec9
GET /js/_rtc.c0e8ac28.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-2f51"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=stti4Ya3nebRId6o3RbZrg2rkr%2FrGBpgelbC7fSJT%2FtmHiDr%2BMu1Kbdyd7JKGHIptx6H0gU8DxgLlb1YLXJq1H9%2FDaHO3mf%2BDPMueBP3CgHujtGKjBpn1iAvgj29Mwvv36bEtsinWI01"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b8856c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/s-storageService.js.e2ed6732.js
200 OK 2.6 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/s-storageService.js.e2ed6732.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2681), with no line terminators
Hash f806b6a6b50b38ee6b37b629fb03e8ef
ef5397225a7c8054f5a214e2a5121bb7cbf35abc
419ab0c4da3c43a5184064620e09a17ec34cb858113f565c455346a5decf9a1c
GET /js/s-storageService.js.e2ed6732.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-a3f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LIQPWDhQkMwG3kKDvnytKyz66GTW8PboakOUgHg5d%2FTPsjQgYSdBJob4hkjch%2B8YlniyDxb7wpfaNK%2BJIDeO6ddQy7nYn0R%2B7zdyZUl9h3R%2BPg%2BEUyAXVnrlkGp6WkX1z1YjfQr8e9aL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b8b56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/v-immer.esm.mjs.775845da.js
200 OK 10 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/v-immer.esm.mjs.775845da.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (10497), with no line terminators
Hash a9b55caad0866134c730f46bb9ed3a6d
d9341ec11cd3e427871deeb1260e5b74dfbb44dc
c85b6ebe2e815c85c04f96491b0d74e99f31388d8a507bcd1593f2ccd303373e
GET /js/v-immer.esm.mjs.775845da.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-2901"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I6fYuenQPRsbnXMV8L%2FS25maz28KSCWjVkqrTRwUcsVwsTS1wX0nmfCYwxFCyICB61U49a8ODKn5s4h5zgXAmHQlj8UL7EBN08ffyRJZw0x6jZA2v%2BxlvDudtTQPX1ioDyklrxHIvZ7h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9056c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-5.webp
200 OK 1.8 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-5.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
GET /img/comments/person-5.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1846
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: "650adc26-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=10PJJSMgqR5fSbSbImxJ6jZohrj3B%2BK78YYpImogLGbNbB86AhX8NIR8WfKhpb%2FHIEcfyb6qfL1p6Q2aFNLlwyuRgVFGvqByrNjAU69%2Bdi7ssTnxHTbaz6hmobCTBOL6xfH9g04XanG0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680356c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/css/survey.9a31db7e.css
200 OK 67 kB URL GET HTTP/3 d31.jeezuquesurvey.top/css/survey.9a31db7e.css
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (35420)
Hash b4d5fd17923c6816d61298601e374ba3
098678509d900f44e19f4c7afcc1a44b0b9f1425
ec38e36294681976811de557f5d3a65e47697e62a9533dba1e26c456131f2526
GET /css/survey.9a31db7e.css HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: text/css
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-10609"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FMqqgSqxl4qpa8kDKpSBo1lZQMuuwjTRWhwXyaoAcAMkYtmgR99ZjaDXJOwkDEd7d62Gm6us%2BkkTbHA96ZB1pZU4nVBKwQXi6cQCTl0ECi%2BTNY7xgVIinb7SpBNElWKCv8zmCqATFj24"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b5b9956c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/icon-survey.svg
200 OK 2.7 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/icon-survey.svg
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2690), with no line terminators
Hash a000ba4d0e7570d810feafb22bc50bef
af8fce44a683d3dfebe69cbe856e747739c9a666
9ae848c180201d8ae5c59ce118b0b7ef395a01295fb04d57e81cfe0566100679
GET /img/icon-survey.svg HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: image/svg+xml
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YHvsVWFcvh03imXmF7K1Vp0O6Jh%2FX9qtuIaAJG5KuygvNgfghnG3D6bVJbcBj7%2Fk12NEuxsiXYFeQYqqDxMuN2V0Zdh2vYajuJ2ji3Lp0k928ctElwRhojsED7jmbHtNlvPkA%2Fiay0KC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b5b9c56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
200 OK 464 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type ASCII text, with very long lines (552)
Size 464 kB (463621 bytes)
Hash e2fe3524ee9bc3801e88f30301fde700
ecdb5bdcebbbaad69868ea78033be35ac9b20a58
a36746585bd5af117aff1cfeec39c2a810d6d9c601ca083d132786abf09d01b1
GET /recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://d31.jeezuquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185696
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 09:16:06 GMT
expires: Thu, 19 Sep 2024 09:16:06 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Sep 2023 18:47:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 16034
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
d31.jeezuquesurvey.top/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 d31.jeezuquesurvey.top/favicon.ico
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/x-icon
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jqvvk5XK41nQoW3fgRuTKIAAgXqwozUDc725vh8XCwsBiwY0CE0ZAbJtLOZ484YMD6VX%2Focso6eLc%2FAr83WlSUu%2F0l6%2FNSibzZ15gRNRaGCyI5EHHA86gbY1cKYbBRHwrOV1mUcoL4MD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f31a92d56c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/_core-survey.816b7b20.js
200 OK 227 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/_core-survey.816b7b20.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
Size 227 kB (226883 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.816b7b20.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-37643"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=01OVmSXI0Til5X3YUqkPjGM9DAidFTZrf45WEuvYfpcOzfMZcKvR0naAm8OHstImNEG4KotwbFFgveY74wy3OLrvsIy9SfjR%2FseiurgsH5zZZH1Dvuc8LiD2WyAnNgCgW1ftXf4eCIX0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b9556c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdntechone.com/stattag.js
200 OK 19 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3618
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q6Ux0ipRP9gSh4mvwYwmT8HNoa%2FFHzaDheV4JCW235dd0Uozo0h1jO6ZtIbHN9g4pG9R%2FL6C22M9VAg9YpzNA09EBVT5FUPRvWbR7ns%2B9c5r0SsdNTgdFGW9WQx8OtTrKg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 809a7f2eedae1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
d31.jeezuquesurvey.top/js/_prefetcher.d6d66ea5.js
200 OK 2.4 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/_prefetcher.d6d66ea5.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (2484), with no line terminators
Hash d8081d6f211de7348b84bed51d3e7a38
560663a3284ecfbddb6c8f6e20d1e0ba01d7d835
035b1173e3f59b87a7157c4027d8fe8a616880d7b79788a6c4a98fd9b8b2e962
GET /js/_prefetcher.d6d66ea5.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-96e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9wb8EmG9LXk9LyTZVCrwBC9t206BJtB46X4N%2B28RiseT6EYVliROA3AZa0bCI4b48%2BVejHOD75JIImeQNXsG5aI6HWGAydrF03uGe7t8qheKn97d3KNZh9Mh7EitGH4yTdLtcWEirUo6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b4b8556c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/scripts/prefetcher.js
200 OK 11 kB URL GET HTTP/3 d31.jeezuquesurvey.top/scripts/prefetcher.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (10761), with no line terminators
Hash b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
GET /scripts/prefetcher.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-2a09"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l9cYhY6X%2BZIlYLht2wsdBaVcAbG4C2x4Xbfj34IBicuI2Y7PkU3%2F93AZNUv7wRd%2FOZTOzJ5b9KNKL4mFaBGPG6MNizs%2B2ubXBKeQXR26L3ELoVcql0DfsptWQB%2FJ2gI7SYIxBayDXFmk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2c2c4456c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/img/comments/person-8.webp
200 OK 1.8 kB URL GET HTTP/3 d31.jeezuquesurvey.top/img/comments/person-8.webp
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d
GET /img/comments/person-8.webp HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=tv3kmwqvknfc5mtprseyvqdd3yhjeswh
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:20 GMT
content-type: image/webp
content-length: 1802
last-modified: Wed, 20 Sep 2023 11:48:55 GMT
vary: Accept-Encoding
etag: "650adc27-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5FtDfTJGOAvnz8rtpdWBMATAeE9U%2Bi66m7Fzlg1c3KDan11XJzgQ5FX6oPJInwXZaXP%2BS%2B6PBwkKMCxwHoaXKLDK3Hyjmu0hfkcqfgeH2VgPASLIugFe1pXXEIdKkba0A9Cfs4qrjWDa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f30680a56c1-OSL
alt-svc: h3=":443"; ma=86400
d31.jeezuquesurvey.top/js/_global-config-sd.ca890aa7.js
200 OK 1.9 kB URL GET HTTP/3 d31.jeezuquesurvey.top/js/_global-config-sd.ca890aa7.js
IP
Requested by https://d31.jeezuquesurvey.top/finance-survey.html
Certificate IssuerLet's Encrypt
Subjectjeezuquesurvey.top
Fingerprint1F:CE:69:8F:CD:35:2D:48:48:2F:BA:A5:F3:C5:AA:EA:0F:48:81:30
ValiditySat, 09 Sep 2023 14:37:16 GMT - Fri, 08 Dec 2023 14:37:15 GMT
File type ASCII text, with very long lines (1906), with no line terminators
Hash 83364a4a9960d8085ba22b7e54972699
87b90e904b0aecfc3c68857ce7dc810c7f790d01
f5b7b00215b38e69e804989960df99440529ddfbdb6328577b2408bf05f88ba7
GET /js/_global-config-sd.ca890aa7.js HTTP/1.1
Host: d31.jeezuquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 13:43:19 GMT
content-type: application/javascript
last-modified: Wed, 20 Sep 2023 11:48:54 GMT
vary: Accept-Encoding
etag: W/"650adc26-748"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BJyiAn%2FoLLcGoeq89bgHeJFKh5xRkyJRuuAKFz5HrZ2egxhboG%2BPd3l3bohS%2FAnBmC5AwQTAcFVTwn%2BUCVZHAGdQoqgirXQjLW1EUz6LSsMFB0IQGpXzTuQZVfkW1q2By8v%2FSPLhddnd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809a7f2b3b8256c1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.96.1
142.250.74.131
139.45.195.253
104.18.15.101
54.37.238.86