| dollarsurvey.org/survey.html | 104.26.9.192 | 301 Moved Permanently | 0 B |
URL HTTP/1.1dollarsurvey.org/survey.html IP104.26.9.192:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /survey.html HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Sat, 25 Mar 2023 22:58:20 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 25 Mar 2023 23:58:20 GMT
Location: https://dollarsurvey.org/survey.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O6WUUdrIl9A6olHrJyS4sXUmwHJ10E7V3kFCYGgqaSAeQ6dj0ishgsiS34AXN9D%2FE45MkOnlOSVSP0z3%2Bk2KwcHFVFLpxPO4NeFf0QOWCk4zw6XhVZzgmblXlOV8M%2FN3%2FIo%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7adac20e6ebbb524-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash5d9435c884bf4a0777fdf4b57079ae09 7f04b9db47ffeec90ac6397416b7553e5336a550 fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13182
Expires: Sun, 26 Mar 2023 02:38:02 GMT
Date: Sat, 25 Mar 2023 22:58:20 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashdfd491ebe7381221b3674c2c8bf9e566 d2ac5badf17f348c28a52e9db10e6eb80e5a231a 34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15221
Expires: Sun, 26 Mar 2023 03:12:01 GMT
Date: Sat, 25 Mar 2023 22:58:20 GMT
Connection: keep-alive
|
|
| firefox.settings.services.mozilla.com/v1/ | 35.241.9.150 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash84db75194692d4afe13196bda6f22da8 4c1f49bc973a4917f146d93c8d598344edc021f6 a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 22:15:29 GMT
content-type: application/json
age: 2571
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash1313ee2f06606d09c45b06ff9e8e1001 285ca89d1d3ea45d35832bc6d9827f834b3bfe21 63463447d29550c3734f621be02ec85290fbdf4612f79f9fad7e94f7e066dcb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63463447D29550C3734F621BE02EC85290FBDF4612F79F9FAD7E94F7E066DCB0"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2674
Expires: Sat, 25 Mar 2023 23:42:54 GMT
Date: Sat, 25 Mar 2023 22:58:20 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hashe7bace7c1e04d44012e37ddffe36e5d5 3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: RhR5yG/0AwaHaVElzKiw0Vx/OtU6sQe5rxgjsakDHDy7SOEhfhXPN/aLP0hqSGSFYC/WRvrpOuk=
x-amz-request-id: H140BNQCD8R4EK5S
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 22:55:05 GMT
age: 195
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 22:58:20 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US | 35.241.9.150 | 200 OK | 329 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US IP35.241.9.150:0
File typeJSON data\012- , ASCII text, with very long lines (329), with no line terminators Hash0333b0655111aa68de771adfcc4db243 63f295a144ac87a7c8e23417626724eeca68a7eb 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Content-Type, Cache-Control, Pragma, Alert, Last-Modified, Retry-After, Backoff, Expires
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 22:17:24 GMT
age: 2457
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashd770f5584a4585480ee500b7f0a98127 130c174d0f9dc2e24ec054f907b2de52fc2e9136 a7101799b8895a3395bf5feac2258c577e513f577d75768ee6fa41ca89027f20
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A7101799B8895A3395BF5FEAC2258C577E513F577D75768EE6FA41CA89027F20"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7304
Expires: Sun, 26 Mar 2023 01:00:05 GMT
Date: Sat, 25 Mar 2023 22:58:21 GMT
Connection: keep-alive
|
|
| dollarsurvey.org/js/_each-land-config.88283c96.js | 172.67.68.68 | 200 OK | 14 kB |
URL HTTP/2dollarsurvey.org/js/_each-land-config.88283c96.js IP172.67.68.68:0
File typeASCII text, with very long lines (48376), with no line terminators Hashc009c72e439802ccb6f049055f396d4e e87d1f3e1f3f349ac40929dd508254c0c042870c 8911862b93ead1f352a10630f342c6ac083b681173e343d182f47db591c693db
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/_each-land-config.88283c96.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:32 GMT
vary: Accept-Encoding
etag: W/"641d8b7c-bcf8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NhnJ7hV%2FjmeWGy0XFpuJy%2FOZeyOkzla5vXVPy5Ri6sqsUSZ6kmoKK%2BIIXUhs7U9ATwu5AVTj3qyRbSINaOS5II6Cl7nJdNBFGD9k4%2BSIKEl6JYpp2I9FcwVf5C4twlQDeIs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f2b0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hash717ebcc65cb1390c2509851bac7b5878 1e04e3058329f3809bc01022d441172dcacc1aaa 3c8d41efe14dc75e001ce50aae65e133d90bcb2e2f86b2426cefe7abe4c7b588
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C8D41EFE14DC75E001CE50AAE65E133D90BCB2E2F86B2426CEFE7ABE4C7B588"
Last-Modified: Fri, 24 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6610
Expires: Sun, 26 Mar 2023 00:48:31 GMT
Date: Sat, 25 Mar 2023 22:58:21 GMT
Connection: keep-alive
|
|
| my.rtmark.net/gid.js | 139.45.195.8 | 200 OK | 65 B |
IP139.45.195.8:0
File typeJSON data\012- , ASCII text Hash13fe81bae75f26ebc0c59df0baf54f50 83a19e378c19e90f4410c584f0127c1d44feafb6 ee777d38107d09a98a001b82f0a049de7f76413907e5d7a36a270dbad7297a99
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dollarsurvey.org
Connection: keep-alive
Cookie: ID=8d5cbba6f65f4adc8090ce358c8cab29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=8d5cbba6f65f4adc8090ce358c8cab29; expires=Sun, 24 Mar 2024 22:58:21 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 3644
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac2159a830afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac2159a880afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac2159a8b0afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac215aa900afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac2159a8f0afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac215aa910afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac215aa940afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac215aa950afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac215aa970afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 382
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:21 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac215ba9a0afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/favicon.ico | 172.67.68.68 | 200 OK | 1.6 kB |
URL HTTP/2dollarsurvey.org/favicon.ico IP172.67.68.68:0
File typeMS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data Hash716c36bc40ab628c8b7861471fdbc8e4 26fd60eab36df685c439ae938ef86c4a4a411ade f7ddb63e315680798925b4bb234fb38370a4ac3c1fc4cab8463eb5365e89c341
GET /favicon.ico HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: image/x-icon
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-47e"
cache-control: max-age=14400
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CJBZofHjVcrcoUybx4%2BoG4AU37WyLFVfWKC%2Fq9o%2Fv0Py5vkktKN0pb5C3H%2BiW22INEm0INancKNGGu7rx7yWLtm%2FOhq7pbwp3hR0KiUt23sYKrGZPByjUTQVtBC%2BgsTdLeg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2161ae70afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 35.163.200.38 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP35.163.200.38:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: CY/lUiKwedSg4rxC8f25sw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: FhF6wGpidafbudZHSyKOOWwH+QA=
|
|
| cdntechone.com/stattag.js | 188.114.96.1 | 200 OK | 81 kB |
URL HTTP/2cdntechone.com/stattag.js IP188.114.96.1:0
File typeASCII text, with very long lines (17823) Hash5a161cbb5ac664d9aba7d7236694ec55 d0ffde2dd373c20b30ef9d24be11ba6be88edb0c 4019271799ed7d8da8ac34fb5320d1e21d503ea42fdc9b97bd3e92f2c66baa9d
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Mon, 06 Mar 2023 09:49:58 GMT
etag: W/"6405b746-4829"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3161
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ct9Bo2w%2BTs%2BLs5YB%2BcEgrkARlI9aomyU0o2ar13v3me8zPe4tmsl0jEp7TOzNX289%2Bem2iH4SQPrlBiEwm3PmF8lb37nXOMMt9%2FZ%2BDMMGu08bUrKtuO6YoIddwj9TeUV5Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adac215cfefb51b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-14.jpg | 172.67.68.68 | 200 OK | 5.4 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-14.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash6012ff0d59aa6a34aaca1ea8f2fa88fc ef59662c9b666106486039e9f1deb40fb4a8ff77 2c020310e91430067c7128425f14ac0ff1710aea5e67c144a8fceac46311182d
GET /img/comments/person-14.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: image/jpeg
content-length: 5392
last-modified: Fri, 24 Mar 2023 11:37:32 GMT
vary: Accept-Encoding
etag: "641d8b7c-1510"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8%2FLr1dfAceph75jCQAoytKoEUkR1jcJr8k0fdJcnP49w4oUfNj0FQ319m8px0U0XwQqd7hhqjw6%2BcyaQYhcNytnUB3HoErFLa8mdTSMVW6g5lUOnDAKXA9nrURyXKkrWXvE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb8a0afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-9.jpg | 172.67.68.68 | 200 OK | 5.2 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-9.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash529370f9fd3b0f4da6c81ca91a931155 1a4c3e0e7af1ce30dc2ca18d48b5fc3f1b40aad3 cdf1b8dcdce4e9b76157ce90e086ebafb100063eaeb091e97087d97f5d0fb50b
GET /img/comments/person-9.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: image/jpeg
content-length: 5190
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-1446"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fVyAAWt9htmUq9yBTM8pz6fm3VBBsDuCHzK7YftW%2B07xJ2ykEE3VxKod1%2F74T9k2gzgKaLzm2Ufw63qkRLFuLwHlEvUBmBXeg0C2Pp%2FfNNt08pc2jaHPtrEc599Jv273u58%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216fb9b0afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-12.jpeg | 172.67.68.68 | 200 OK | 3.5 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-12.jpeg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hashc937339f4ba54ff7dc150b9865c29084 44206828ca23cbed303193bde1dfe47bdc532972 8e872daac17de58d352c9f4082e6e35af76a8b2138c142a8cf0fbacea195c73e
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /img/comments/person-12.jpeg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 3519
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-dbf"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NZewaoOnpwhtCBVgDAEY4%2FmFGf0uzOg4mgkjl1uEhPlaHEi70lYb%2Fk1ZD6Qct1Coyb6HifuZaBy%2BuBOZir1VIJJK4JomsK8K5xQJB8bgr6cXXKj5NkQ80do5QUbIdu7twoQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216fb9f0afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-13.jpg | 172.67.68.68 | 200 OK | 3.2 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-13.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hasha3364ed9e772ae6f696b814072001bf8 b8f34c657c31bf1e4d42b5d864b2519493d80e92 88f30b8552d0ab928d895390b337a0049405f3b1e8446631e606ba787e1205e1
GET /img/comments/person-13.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 3172
cf-bgj: h2pri
etag: "641d8b7b-c64"
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nkZ2GUst6RCn6WDOrkihGv0cWxruuQyd7FPkVSEUlNnQ0XI49ApbpAkdLtWyu7q1Bm6sF%2FjLmVyVKzYAwBn4CQDfPTNpBHSkSwq1ESSJuU%2BS13QvEdR1X3sh72toP8NAER4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216fba00afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-2.png | 172.67.68.68 | 200 OK | 6.4 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-2.png IP172.67.68.68:0
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data Hash3e6eaea87b2891590972dd11373b09a3 f038c6e6306ca708defa2b601bf9477f0cf78a3d 15aadd2e7f4f83e79f35e760da382fb8b5045d2cf506f531bdc15b7b27f699a5
GET /img/comments/person-2.png HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/png
content-length: 6428
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-191c"
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1gU1Rx3aUVqyNsG20cmnYTUUbZMmcxs6XS%2Fb3fufkJgnYEUMVRnozYcYQbHId0Zg%2B%2Fue9RHjIJY5CkFbHoqiTrPGkcqvZ9VnWmnKSsRiZ%2BSTWszBQ1mLcN9DJyhPAn4wHbw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb910afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-1.png | 172.67.68.68 | 200 OK | 6.6 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-1.png IP172.67.68.68:0
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data Hash8f9a954bf05965bb41cf97a7ddb7a375 de9db936bbea75043e08a55d1f371678fca2270c a787bd40650924a7bbc61d6ea0bbcaddae4b3129fd8028b68c3629210e41e26d
GET /img/comments/person-1.png HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/png
content-length: 6577
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-19b1"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WXXVXdiCmBxvjeZSJROck5DLQc8n1cYfvmXrVLbVhVOYLMHTsx1acm9lz5X0rhNlpUDxPmvfAGHRig0mKo9TQ5dlf62dFayqgGIaQgYqm4LV%2FF1WBnDXPHAAcQuwruN4ZUM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb890afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/unnamed.jpg | 172.67.68.68 | 200 OK | 1.4 kB |
URL HTTP/2dollarsurvey.org/img/comments/unnamed.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash449aaf5a54e3fe3aa4f0f5875bede090 b2b897362626700277b7f8baca8b1f292d08b7e5 4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-562"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eBgp4V7ywZhl75AtLliqOJo%2B8xfqJbMjw%2FaojAbTnYHDUcCY0gTKe6cupt7ttraBAROmUKlEr6X3UOb3sieEOQn6upQ0Y6dbCqqaeMeeCiMHp4B0%2FrISny%2FHw6p%2FTmAIuVI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb880afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-4.jpeg | 172.67.68.68 | 200 OK | 2.7 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-4.jpeg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash6cf64555e2de0ff8b5391081b648b89a a32008bacf7f8cd3859eb86c6c8d36eeb15dbdf0 d4f513bf3a5691b900739cf79285d18ef09ef4b81eca648261b15a693d21818d
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /img/comments/person-4.jpeg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 2709
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-a95"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ha4PKN1hSogDRb%2FPaxh5730lbC2jlPAZCDblOF44rbsKHD4VntTZZvyJN7MlvuQ8N7bsouw0Xs%2FE3dMdl6BeiG5kxfzGj5rB%2BVj8POggQOyLlgwdkuhKZ5bCNuRfjbQnNbg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb930afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-6.jpg | 172.67.68.68 | 200 OK | 4.4 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-6.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hashbe9ff88491a5bc0745579a3813eb2cbe 870f88a7fae9fdd928af33f47c5ffdddc6a4082b 698d413ddf6b2ec37acf0e982237d239bd912cb097e243cb355855ac2b8548d3
GET /img/comments/person-6.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 4392
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-1128"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8zf6lN356Xr%2F1bAVkaV0CuJk2BbMTq7NN4KP04kFZTNBedJYcVNp12QCwiT2cdQq4aABFEQHD43%2FfEiCM7awohHG3t7hAFYdR%2BUkIAMXofnzSniSh1tmA1%2BAiqjVh2Qs5Ps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb970afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-11.jpeg | 172.67.68.68 | 200 OK | 4.2 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-11.jpeg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash3924bdc784dc4947f52b779aa4d5a0aa 1e3f3fdd99490addd60014aa7327fe27c6bd5589 b3f882f57f9a213d85eb1c5c6a8a1451bd16dfcd9e4bd00e0a74584422dbd950
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /img/comments/person-11.jpeg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 4175
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-104f"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IuMdPYxEs%2B3ZF6f%2FRAxmXz44gshO3mEFcM8BIFGp4uORSlI2NxylF9Sgoax64IaQclW3%2BP%2BETm1VBkFfNP5Mg60eSrajFyKdIIMins0Itm7ZcWzOQbtoqM8yXFuDNe6iENE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216fb9e0afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-3.png | 172.67.68.68 | 200 OK | 7.4 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-3.png IP172.67.68.68:0
File typePNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data Hash2f62e53b6333bc904be22a37a1fd0ace 6e972fefcbe0193d9b28817c47c1ceab2a0235d1 9128194f1b1bf44435a3e80f994157b94a40a3365cd8f0794dcadb41a24c3b41
GET /img/comments/person-3.png HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/png
content-length: 7368
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: "641d8b7b-1cc8"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bMKTaHsGUXlDZyTNiKF98veGLZcZcZ%2FTEU8BRywaYQdKh5zR4sXQ2G2q61ZXhCO0cxt%2FBG5xzZ80YRckKkXLir%2FfPu0G7%2F6AzMPRr%2FLqnt1%2Fy4QgrkDc3kjgoFwvmUl0P%2Bg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216fb990afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-10.jpg | 172.67.68.68 | 200 OK | 6.2 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-10.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data Hash044ab37551bfe632f53b8f15d991f36e 77fdc6210608e5e36e1d36ac7fd867104cb20d9e 36adcb32026c016feaff678063911fcc9e7985e9f0c56bb1daa776f98964ef91
GET /img/comments/person-10.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 6178
last-modified: Fri, 24 Mar 2023 11:37:32 GMT
vary: Accept-Encoding
etag: "641d8b7c-1822"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0rP6tffgEzKQ0PMmIk2wt3p0A6rTw1Za8QqcxAasLL%2BD5wKm6DNjyrInaO5TMay4ck8LzAJjwFNp63b7sldPIdiytUkEGXchGnPQ2l%2Fde17DztBPlY3ripZfDbMeUXsByzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216fb9d0afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/comments/person-5.jpg | 172.67.68.68 | 200 OK | 4.3 kB |
URL HTTP/2dollarsurvey.org/img/comments/person-5.jpg IP172.67.68.68:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data Hash21fd6ef6d69b527c02e92a8c23d28d52 5980b75edc23f7fa2f57fa257cb67c9efb86fa58 f37490dbef620959d7124e3de027c5b5c43a57dc90737163947a6725444051eb
GET /img/comments/person-5.jpg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:22 GMT
content-type: image/jpeg
content-length: 4333
last-modified: Fri, 24 Mar 2023 11:37:32 GMT
vary: Accept-Encoding
etag: "641d8b7c-10ed"
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HCDqqpwQYiIcQf013vXRnshIncd3kpyv6Z5YiQqUq%2Bw2u3gKMFzpx%2FCawbVUFpDJYFTKfwKpnZ9Bc3qf1oCGtgMe%2FsfdZiWpAR2QWs4frOuNW6oeBXZDDnq8XHHSJn2oNSc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac216eb960afe-OSL
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 9991
Origin: https://dollarsurvey.org
Connection: keep-alive
Cookie: _ym_uid=167978511635595263; _ym_d=1679785116
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:22 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac218ed090afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| ocsp.sectigo.com/ | 172.64.155.188 | 200 OK | 471 B |
IP172.64.155.188:0
Hash34d673109524ef460cb684d119a101a8 9e8c6ed3ac6702af6acb99bacd69d96f5f24451e f3037cbd7b7b20c8856bb414a6b808aa43c3d6be8e05ef45d083855fc2d2f2dc
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 25 Mar 2023 22:58:22 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 23 Mar 2023 05:19:50 GMT
Expires: Thu, 30 Mar 2023 05:19:49 GMT
Etag: "9e8c6ed3ac6702af6acb99bacd69d96f5f24451e"
Cache-Control: max-age=367886,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7adac2174b79b50f-OSL
|
|
| datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a | 37.48.68.71 | 200 OK | 12 B |
URL HTTP/1.1datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a IP37.48.68.71:0 ASN#60781 LeaseWeb Netherlands B.V.
File typeJSON data\012- , ASCII text, with no line terminators Hashadb4650bfc9d2a73d4dd69583b0ceb14 1ce399d6e936232aaf2192cd7903a279c5015f22 21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1179
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sat, 25 Mar 2023 22:58:22 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://dollarsurvey.org
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
|
|
| mc.yandex.ru/metrika/advert.gif | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/metrika/advert.gif IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:22 GMT
access-control-allow-origin: *
etag: "641c2476-2b"
expires: Sat, 25 Mar 2023 23:58:22 GMT
accept-ranges: bytes
last-modified: Thu, 23 Mar 2023 13:05:42 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afp%3A287%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A779298401%3Arqn%3A1%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C92%2C1%2C%2C0%2C%2C165%2C2%2C%2C%2C%2C341%3Aco%3A0%3Ans%3A1679785115383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) | 77.88.21.119 | 302 Found | 400 B |
URL HTTP/2mc.yandex.ru/watch/66423859?wmode=7&page-url=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afp%3A287%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A779298401%3Arqn%3A1%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C92%2C1%2C%2C0%2C%2C165%2C2%2C%2C%2C%2C341%3Aco%3A0%3Ans%3A1679785115383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) IP77.88.21.119:0
File typeJSON data\012- , ASCII text, with very long lines (400), with no line terminators Hashb55012c1fb48294be4ad78cf797d7c94 8da8466b6d58aa06632fb53a6c813f766d5155ba 494beefb755c194819b5926fb15e7e97393bb5b11ecc4d186f49a36bf567fc4b
GET /watch/66423859?wmode=7&page-url=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afp%3A287%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A779298401%3Arqn%3A1%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C92%2C1%2C%2C0%2C%2C165%2C2%2C%2C%2C%2C341%3Aco%3A0%3Ans%3A1679785115383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afp%3A287%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A779298401%3Arqn%3A1%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C0%2C92%2C1%2C%2C0%2C%2C165%2C2%2C%2C%2C%2C341%3Aco%3A0%3Ans%3A1679785115383%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Sat, 25 Mar 2023 22:58:22 GMT
access-control-allow-origin: https://dollarsurvey.org
set-cookie: yabs-sid=790633891679785102; Path=/; SameSite=None; Secure
i=OE+cT++u8ujNSJpviWqAnherEFIdDuBY6yU2g4omaWxJl2mMN/wycczhSAh/CAx3vpStIpa1yMsq4qs8zi4pZ2/5YKc=; Expires=Tue, 22-Mar-2033 22:58:14 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=1415868021679785102; Expires=Tue, 22-Mar-2033 22:58:14 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None
yuidss=1415868021679785102; Expires=Sun, 24-Mar-2024 22:58:22 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1711321102.yc.1679785102#1711321102.yrts.1679785102#1711321102.yrtsi.1679785102; Expires=Sun, 24-Mar-2024 22:58:22 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:22 GMT
last-modified: Sat, 25-Mar-2023 22:58:22 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonStepChange&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A992359331%3Arqn%3A5%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonStepChange&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A992359331%3Arqn%3A5%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonStepChange&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A992359331%3Arqn%3A5%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:22 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:22 GMT
last-modified: Sat, 25-Mar-2023 22:58:22 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonAdexCall&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A804336253%3Arqn%3A3%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonAdexCall&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A804336253%3Arqn%3A3%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonAdexCall&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A804336253%3Arqn%3A3%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:22 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:22 GMT
last-modified: Sat, 25-Mar-2023 22:58:22 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonUnique&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A948428276%3Arqn%3A4%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonUnique&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A948428276%3Arqn%3A4%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonUnique&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A948428276%3Arqn%3A4%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:23 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:23 GMT
last-modified: Sat, 25-Mar-2023 22:58:23 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonSurveyStart&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A455120980%3Arqn%3A2%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C865%2C865%2C1%2C%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userSurveyId%22%3A1203056%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonSurveyStart&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A455120980%3Arqn%3A2%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C865%2C865%2C1%2C%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userSurveyId%22%3A1203056%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonSurveyStart&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A455120980%3Arqn%3A2%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C865%2C865%2C1%2C%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userSurveyId%22%3A1203056%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:23 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:23 GMT
last-modified: Sat, 25-Mar-2023 22:58:23 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonAdexLoad&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A767604860%3Arqn%3A6%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonAdexLoad&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A767604860%3Arqn%3A6%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonAdexLoad&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A767604860%3Arqn%3A6%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:22 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:22 GMT
last-modified: Sat, 25-Mar-2023 22:58:22 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A69133080%3Arqn%3A7%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D | 77.88.21.119 | 200 OK | 43 B |
URL HTTP/2mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A69133080%3Arqn%3A7%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D IP77.88.21.119:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashdf3e567d6f16d040326c7a0ea29a4f41 ea7df583983133b62712b5e73bffbcd45cc53736 548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fdollarsurvey.org%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fdollarsurvey.org%2Fsurvey.html%3Futm_content%3Dzd_public_v2&charset=utf-8&hittoken=1679785102_77fb4296da6bac247c54187f69484ee9f3802fde29cf22a07908f35329909145&browser-info=ar%3A1%3Avf%3A3ue65zhww2f2brt35wtrrz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A990%3Acn%3A1%3Adp%3A0%3Als%3A50969123605%3Ahid%3A492818015%3Az%3A0%3Ai%3A20230325225836%3Aet%3A1679785116%3Ac%3A1%3Arn%3A69133080%3Arqn%3A7%3Au%3A167978511635595263%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1679785115383%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1679785116%3At%3AWould%20You%20Make%20A%20Great%20Career%20Online%20And%20Become%20A%20Millionaire%20By%202023%3F&t=gdpr(14)mc(g-6)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Sat, 25 Mar 2023 22:58:23 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Sat, 25-Mar-2023 22:58:23 GMT
last-modified: Sat, 25-Mar-2023 22:58:23 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9145
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:58:23 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashb62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Sun, 26 Mar 2023 01:53:16 GMT
Date: Sat, 25 Mar 2023 22:58:23 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.77.32 | 200 OK | 503 B |
IP23.36.77.32:0 ASN#20940 Akamai International B.V.
Hashb62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9145
Expires: Sun, 26 Mar 2023 01:30:48 GMT
Date: Sat, 25 Mar 2023 22:58:23 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashb62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Sun, 26 Mar 2023 01:53:16 GMT
Date: Sat, 25 Mar 2023 22:58:23 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.33.119.27 | 200 OK | 503 B |
IP23.33.119.27:0 ASN#20940 Akamai International B.V.
Hashb62c9b9530dd66bb7f03ba2ce3d835da bf8560766de78dd925e395f59610ab2f1335e565 62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10493
Expires: Sun, 26 Mar 2023 01:53:16 GMT
Date: Sat, 25 Mar 2023 22:58:23 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg | 34.120.237.76 | 200 OK | 7.8 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash9b21b2c60279839939b60afd83d047fa 544c243fe2d69156f50eec156a62de127128a028 091a59214cfc0af90b4cb820bb521577ae63e862ec10160b8f64c9a9e593630d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffbfc8880-7788-4d8c-a59c-c048b787b772.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7823
x-amzn-requestid: c528eae7-69b4-4669-8c15-2b306586b84b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHx5IAMFlEA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-340c77491ea4440b340e3822;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: 2uV186j4t31jcyYDdXxsw5YgM6P5nCbzmgXWvG-pVSpvsjXz6Fsp0A==
via: 1.1 e39f48cc8f516dc1072afdb086c71f32.cloudfront.net (CloudFront), 1.1 4d8620b80ebe37d366388e117039aa8e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:19 GMT
etag: "544c243fe2d69156f50eec156a62de127128a028"
content-type: image/jpeg
age: 4864
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg | 34.120.237.76 | 200 OK | 9.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash8dc799aaa2f69ef1109501a605dbdcfd 58cefa986d580ee408fbca288e3e45ba86fb97ac 54fa967d6b96b456416c62140a4eb9b6cda29b80d5083b5d1321b1fb89b3455f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F381b1b42-2394-4e4e-bb0a-986511a19bd1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9124
x-amzn-requestid: 30a39bb7-d3cc-473a-a5f9-4921367832c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kUESiIAMFVEQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-6c9bb97512fc3c8a3ecedc43;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: _4VxID1v_auG0Vuzp87FJoPbgJovhYYYa1fpzQZze51I6HwFKbja6w==
via: 1.1 6af36c6902a46beec743522a9bbb3ab0.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:20 GMT
age: 4863
etag: "58cefa986d580ee408fbca288e3e45ba86fb97ac"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg | 34.120.237.76 | 200 OK | 9.3 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashd54efd2b1b21530d0da6f7a622ea898e 656849322a4885c98f1f06600f3c4680522d78d0 88d941b88e10152a49bd5e07bb6d7f31a1e3b2841562985d1869f5eea6aacf7b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fde451a1a-fcba-44c0-b885-cf9daa6d2ff8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9290
x-amzn-requestid: ea6a8cc6-98ee-4d42-9cb7-73087027dde2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1soGZRIAMF0-A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f6983-32b521b073af557b282cb6b4;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:37:07 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: e9-yBXmWuJNMgLW5o94HfYQHa-zDPF7IlIv07Wct4ODIgtWaZmAW-w==
via: 1.1 f3802d173009698413044360f84de06c.cloudfront.net (CloudFront), 1.1 b48dedcc55e63f14261aa92cf2d61522.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:08 GMT
etag: "656849322a4885c98f1f06600f3c4680522d78d0"
content-type: image/jpeg
age: 4875
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg | 34.120.237.76 | 200 OK | 5.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc8a2437b3c9ab01cd0e2327d4be5c61a 33573e5a6b6c1912702040c6d880c362baf0c3db 2556646c122f89bfce8467d13bf05e68f735373c8c18a33f7258f37f602673cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a195fab-643a-48cc-8f4e-51e27511b474.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5424
x-amzn-requestid: b03169ca-0cc0-49f5-b785-5e29d70048cf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWGCnIAMFf7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-679415d416cf3b666ec128be;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: cMFdcKw6RZYIg35YKKDuetMlSGtT-g4Kc2L-BHA5s0877l_Gg-PqUw==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
etag: "33573e5a6b6c1912702040c6d880c362baf0c3db"
content-type: image/jpeg
age: 4876
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp | 34.120.237.76 | 200 OK | 7.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashe924839a6364def37d8e9d20af3f5999 42e3c97cb72a824d50de5b49e92731a7678c4e73 64725edfecba86737c10dbbc9c70faec28405bb36c565e899889fdaa73979694
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F080fe5e4-bfa3-4b7e-bc7b-ea9d3348e6c4.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6976
x-amzn-requestid: dd142563-f3de-4390-816b-192fc44c480d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CW1kWHjMIAMF9xA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641f694e-5dee56692bbe2f35034c9178;Sampled=0
x-amzn-remapped-date: Sat, 25 Mar 2023 21:36:14 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9XWn6M9cWWvXWTIjT3RRtZFQMCOTuqyRoNcDflwnaBp50j1QoCXfsA==
via: 1.1 a87682502db4b394cc6ba84510da9f98.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 21:37:07 GMT
age: 4876
etag: "42e3c97cb72a824d50de5b49e92731a7678c4e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg | 34.120.237.76 | 200 OK | 4.0 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash85351059b67b0a42eda7e69a31b3b4b4 b798268806dc2f79f033e5872676019faf0e0cc1 86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 61319
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 | 139.45.195.8 | 200 OK | 43 B |
URL HTTP/2my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 IP139.45.195.8:0
File typeGIF image data, version 89a, 1 x 1\012- data Hashb4491705564909da7f9eaf749dbbfbb1 279315d507855c6a4351e1e2c2f39dd9cd2fccd8 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Cookie: ID=8d5cbba6f65f4adc8090ce358c8cab29
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 22:58:29 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=8d5cbba6f65f4adc8090ce358c8cab29; expires=Sun, 24 Mar 2024 22:58:29 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/cdn-cgi/rum? | 172.67.68.68 | 204 No Content | 0 B |
URL HTTP/2dollarsurvey.org/cdn-cgi/rum? IP172.67.68.68:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | fortinet | Phishing | |
POST /cdn-cgi/rum? HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 587
Origin: https://dollarsurvey.org
Connection: keep-alive
Cookie: _ym_uid=167978511635595263; _ym_d=1679785116; _ym_isad=2; _ym_visorc=b
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Sat, 25 Mar 2023 22:58:29 GMT
access-control-allow-origin: https://dollarsurvey.org
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7adac247a82a0afe-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/v-immer.esm.mjs.ae430b67.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/v-immer.esm.mjs.ae430b67.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/v-immer.esm.mjs.ae430b67.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-2900"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JVDwMJD%2Bv1wXc1XvUd3nyKmMGbWPPorKDqdcGz6MvEZfqSjw7TuqTFaEasGTNAVWTkfqRct%2BWcRwQQ25QoTiRcsOJErpk7poE9EbGnGmK4up%2FFsAsVX3R3AGZxlJx4C%2BgQs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f290afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/img/icon-survey.svg | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/img/icon-survey.svg IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /img/icon-survey.svg HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: image/svg+xml
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-c19"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uaJ%2FAQYl7mVHRD5%2BgHQYW5%2BA3oPD6XVojfIDh3h21kDHS6OIVnIBdcGDuWtqdeAWw2xpyPvn26VnPGJzsEDb3Gmd3r%2F7XDKgS1zLibamfR9aHaJwXwwBtrHMG3iQfHqfDao%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac211af460afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/_global-config-sd.23e09f22.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/_global-config-sd.23e09f22.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/_global-config-sd.23e09f22.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-3c8"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NJqleV94senAbv3pdXLqo%2Bt50VqlMAbBWTc6hpBJ5HpA35MrFsG9IqtxhHWbRxcUgFFPqGYwC7twre20VCBOtRp0NBuSE13TLb34g9x1jKeHAMUFPgYziz5Zhy2Rg7PZT8Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f200afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/survey.b0ec82d6.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/survey.b0ec82d6.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/survey.b0ec82d6.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-153d"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9b%2BAL5Uj5XCK1R6NuE%2BWO9oQEnKeaeHw%2FbrmsUnQ0l6PJXHn0CcusTjRf241vT%2F1wMtMPgJ5pDObxicKBpruEDLODzUQ%2F8iQpWsglg1O4lkAXnUQKxFYo7SOlBEnTwJPsDo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac211af3d0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/css/_core-survey.4a4f0a3c.css | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/css/_core-survey.4a4f0a3c.css IP172.67.68.68:0
GET /css/_core-survey.4a4f0a3c.css HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: text/css
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-5a0"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4O8nJuz1OFXOcnSO3gQ%2BFx4MM6NMcy89kcif9FbU4kq36CZWtzPXAe19GsRfCa8Z3J%2B7gD289Lrd1qGnx3WklWmhYlPQZrTHKazdnQC%2F%2Fh7P7DD3ipNQyxg6iEHuJa8r9sI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac211af400afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/css/survey.e3c4fadf.css | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/css/survey.e3c4fadf.css IP172.67.68.68:0
GET /css/survey.e3c4fadf.css HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: text/css
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-102ee"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hqpjOBWZ%2BY7QweyXKDRCPF%2Fzo3uhcvSMdUm%2F2bEoosGnvIVNuDX0UEHvJNzSH1p0dXVr4snPsANoYjWAtmTLRMZwDgYf7Kc0tb1zFy6h7nlROkohZdzR2QPxMQ2O3ABLGCI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac211af450afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/config/data/sd-1203056.js?v=10 | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/config/data/sd-1203056.js?v=10 IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/config/data/sd-1203056.js?v=10 HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-1fb7"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RV8QEFYg1bi%2Fa6fTVdxqxLQbgbu%2BucJhQna4XFflfI6yulAjClIM6O3NtgQma9rUmuxB4ECEQ3vji4l7HtgsZTk2us7PPkaJf5ikvdWJBOFhPna7EKAfdaIYKYughL3bmWY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac21348a00afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 | 104.16.57.101 | 200 OK | 0 B |
URL HTTP/2static.cloudflareinsights.com/beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 IP104.16.57.101:0
GET /beacon.min.js/vb26e4fa9e5134444860be286fd8771851679335129114 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://dollarsurvey.org
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2023.3.0
last-modified: Mon, 20 Mar 2023 17:58:49 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7adac211ce201c0e-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/_is-browser-supported.9f5c5e34.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/_is-browser-supported.9f5c5e34.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/_is-browser-supported.9f5c5e34.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-3fd"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fx%2F1Ui4ojveDh%2FYMHeb1Lqukbat5iIMV1Eilxel52OxOr1gRcJy%2F9gm4FcsbQzBoKHpvlUgy1o2iY2mUgGVeacnUULWRWU%2F5Ljemiq%2BEOasvLe5hX7DFvoISo7aWgpvwXN0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2118f1d0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/v-redux-toolkit.esm.js.da1c1714.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/v-redux-toolkit.esm.js.da1c1714.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/v-redux-toolkit.esm.js.da1c1714.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-29ad"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bFW6VARKSE9tyWwIqTuEuCtL3p6fkv%2BL7GVS4jCB9nunmTMTkv3U%2FEBAqmtTd7kLNGo7sIKkyx1YSBWudZ8Za7CQSjYJI2w1Gki9uqU%2BG46lRy4owdeWur88eGGcSVhlO9s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f270afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/_rtc.9bcecfc2.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/_rtc.9bcecfc2.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/_rtc.9bcecfc2.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-2bb5"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VZU5t0DYEumfgJO8XS5uKjOMYEsejBI9I6QvZ4%2FZfG0Hphzz20DL5EfGpJvuuu4L2ZLcevbqkxGNi%2BQJ2zDgRclfVfjhGBF26NUffgjMsb0dJ1ilbXfMQwZUi53KG7%2F%2BjWU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f210afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/v-index.js.1708132c.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/v-index.js.1708132c.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/v-index.js.1708132c.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-9e10"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XcMkw9lDaVQaSUJhKzBjQ6VYSpaCs8Q39whN9AwrE%2B%2FtrPrzk9c4YHahm87Vvw976XkwfulY5BnCP1v4cmmD5GhfxgDS7r0xghDTflZ5PXh5xjoKYV2mX%2Fn3oaazPOqFsds%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f240afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/config/dict/cookie-consent-1.json?v=10 | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/config/dict/cookie-consent-1.json?v=10 IP172.67.68.68:0
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/json
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-1a66"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=flBGiVqGmLVr%2FKOyZbCq3Ms%2BdI8ELxEHTcgKjWV0zzQy7O4VC2b73%2Fu3HPXz542vbMtx%2BM3x5YOr3mEGQ26n5fhINj4Yw2R6BJHZLGUrJYPFc3Tt64W4nga0jaa1Qmw57%2Bk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac21358a50afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/survey.html | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/survey.html IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /survey.html HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:20 GMT
content-type: text/html
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CzK9aaS5YNY2VyCMrcGW%2B5fvtwkpoiYUVv9aOJcFHLZ0vXwmSBxFGu13wGd1kQDdpEvEABl2iSGCyuaRSbMJdYCvrdD1EqtDqETICeVNuhBaur1ErY18ZAGPM0Fsvq0ztco%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac20f9d490afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/s-storageService.js.24e15119.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/s-storageService.js.24e15119.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/s-storageService.js.24e15119.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-a0c"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R8F9OUrTRkSqYRonkaGtT3ZN%2F8EEUkYQ1uRf92o%2BFRacKiWiIAm8shd2aR%2Bf0iGrddgUpRvFkt2QZzFAmqIPvSkE65tHwT5uxTBoF8JVPdaC7AcsiZR%2B5oZHcxtHhiuT6OI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f230afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/v-index.mjs.63a64d9b.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/v-index.mjs.63a64d9b.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/v-index.mjs.63a64d9b.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-88eb"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pVWtZ5DoD7VJ7OZoAnz6ZWkIjlpzg7Mc0B6fGqOXNASdd%2BSXBWZ9cF23Twhh507osRbWp%2BUBBMA27rgzvLEwe2gr1bDgRbCyB1ckkJZx3Squ2TMoicZZDUD4Lh%2BRjzd%2BbjM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f2e0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/v-react-dom.production.min.js.dcbed190.js | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/v-react-dom.production.min.js.dcbed190.js IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/v-react-dom.production.min.js.dcbed190.js HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/javascript
last-modified: Fri, 24 Mar 2023 11:37:32 GMT
vary: Accept-Encoding
etag: W/"641d8b7c-1f8eb"
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mdP1W9TYjtfPa6nd9lhvalggcxyajYCmb1HK4FcPnR%2Fn%2BH0ofdDTz%2FecyatBMJrc%2F6N%2Fw6BvW02FrEIqGF3Bs6UYwyZrE8HySluRyR744x3wc13Ly8Y2mD3LWmVz3dqOi44%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac2119f310afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|
| dollarsurvey.org/js/config/comments/en.json | 172.67.68.68 | 200 OK | 0 B |
URL HTTP/2dollarsurvey.org/js/config/comments/en.json IP172.67.68.68:0
Analyzer | Verdict | Alert | fortinet | Phishing | |
GET /js/config/comments/en.json HTTP/1.1
Host: dollarsurvey.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 22:58:21 GMT
content-type: application/json
last-modified: Fri, 24 Mar 2023 11:37:31 GMT
vary: Accept-Encoding
etag: W/"641d8b7b-11ad"
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LpSg3P48ygOyNsm%2FEohbJZRAfeHs%2B0ryJA78hf6CDMu5XWu%2BxuR7kAv47MXcSwoTFp%2FFPtJDgPuPJvSFZGyNH509fQhtIxm5%2BnA%2BpCKEPCzBpZoV7v%2Bcg0sm3t5ZLv5QUvQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7adac215ba9e0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
|
|