magictrack1.com/click.php?key=dw7bprz634g54nsrt183&clickid=M7280798078813077514&partner_id=3630&pid=3630-30b7624z&creative_id=[[creative_id]]
302 Found 0 B URL User Request GET HTTP/1.1 magictrack1.com/click.php?key=dw7bprz634g54nsrt183&clickid=M7280798078813077514&partner_id=3630&pid=3630-30b7624z&creative_id=[[creative_id]]
IP
ASN #24940 Hetzner Online GmbH
Certificate IssuerLet's Encrypt
Subjectmagictrack1.com
FingerprintD5:15:17:32:2E:D0:9A:55:C2:DD:25:AC:69:A2:FE:E4:D1:C7:ED:40
ValidityFri, 08 Sep 2023 00:03:51 GMT - Thu, 07 Dec 2023 00:03:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?key=dw7bprz634g54nsrt183&clickid=M7280798078813077514&partner_id=3630&pid=3630-30b7624z&creative_id=[[creative_id]] HTTP/1.1
Host: magictrack1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.22.1
Date: Wed, 20 Sep 2023 06:55:21 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: uclick=e21n4kvcdz; expires=Thu, 21-Sep-2023 06:55:21 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=e21n4kvcdz-e21n4kvcdz-8r8w-0-16a3-my9l-my6j-636085; expires=Thu, 21-Sep-2023 06:55:21 GMT; Max-Age=86400; path=/; secure; SameSite=none
Location: https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Strict-Transport-Security: max-age=31536000
gleedrep.top/css/_core-survey.3c68fa3a.css
200 OK 39 B URL GET HTTP/3 gleedrep.top/css/_core-survey.3c68fa3a.css
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with no line terminators
Hash 8dedc9c85547dbfd18d8d2c35016e8c4
09caac80aab26aa3cb9c3db1cc8587da978819bb
156a7eb2ee3221c33626185f4fc8bd5c047513c7f01945f1461692fadd87f95b
GET /css/_core-survey.3c68fa3a.css HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: text/css
content-length: 39
cf-bgj: minify
cf-polished: origSize=40
etag: "650996d6-28"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r20lOnHFCrkApYj5scCdXfAu4WnbRnR8XjGLjTVSoHZRq9TZZBH7bIDVT5z8L3ca79ZYPLG78azqJxw956ONp5mNm%2B3fhSUzyglfGocUVVuyyEXr1qHcMh64jj443do%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829962a7a5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/icon-survey.svg
200 OK 2.4 kB URL GET HTTP/3 gleedrep.top/img/icon-survey.svg
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2674), with no line terminators
Hash 9a8ba19b913810bd358e5caf3a7c2a75
6eff5e84f2b82772bb6029088ed852a8161b3252
58b0a3aa24ef605d4b812bcf92cbaa2e7f78bd43f929ca6362bc259da610399a
GET /img/icon-survey.svg HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: image/svg+xml
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bic%2BPhRDKgbc8q0pY34GwRy06PC5lLqxeT7%2FuiyVSt%2Bc6zYHLeEIz7Fv7rfIJQFDlkTKwVKMoAoYNMXiH8V540vwX%2B77TwOIQBY85olIwfCb8ocx81h6W8HBapZFgJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829962a805695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/survey.9ba0d360.js
200 OK 2.4 kB URL GET HTTP/3 gleedrep.top/js/survey.9ba0d360.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (6056), with no line terminators
Hash bf970481c292d02f4d54a35a380e04d0
a7a4981ae88714d808592c7e0c6ba5e194a4afb3
0a01eed1c36b62c8442d96789b5b15f7dc607605ac901dc57250177b0b48c1ab
GET /js/survey.9ba0d360.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-17a8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fHjJcgDd57xeMn4T65LiWVsPT1UiX1oVWiT%2BeBOPB6J7ODI3vLuS7Yl8UDw%2BFSs%2F6R61CSWoJ%2FqoZytEyPZvzNjQa6bR73SWBnI1uYeX0jWbe5EqZ7KPb2CIP%2BOMfWM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829962a765695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
472 B IP
Hash ae50dd0b146eaba47d6875ee64e98171
12f1c80bcc2972dbb73c578b8169b7441ed10c29
d070845e05c34fa765452de8e6b6cab85a557b35daeabc235fa46adc4f942307
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 06:55:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?render=explicit&hl=en
200 OK 558 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 645cd6634a9669f2b068dbef1be646a0
de9dc91e6daede1d27cec2a2a6aeff03b782b4c6
70a12392169d94b68992cde2d6d35122f73e4c9cd3ed1f3d223dcceaf9da08f4
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Wed, 20 Sep 2023 06:55:23 GMT
date: Wed, 20 Sep 2023 06:55:23 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 558
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gleedrep.top/js/config/dict/cookie-consent-1.json?v=10
200 OK 3.1 kB URL GET HTTP/3 gleedrep.top/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type JSON data\012- HTML document, Unicode text, UTF-8 text
Hash 4f1c632e971c4261f927ed0cf67bfdee
18c72b10719ca98b61b1f1f84e4b01f0ed8b3763
2bfa8e9b4326caea44f0d0c0345a31f34f19d47ae2e60fbc7c557df9ceffdca6
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/json
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FG%2Fa%2F8raRAz0ddY%2B8Fn3TG7n9NoZwbcb%2Fg32IENn%2Bc3OYtJmn01MSPmHpwq7YUys7TRsNqUavjmHlwU8TBFs9tNv%2BuyMByFbgqnn7hrnj0LheMlzlt%2B6aCPip1wFe%2F0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829983cac5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/v-index.mjs.c6b8f796.js
200 OK 19 kB URL GET HTTP/3 gleedrep.top/js/v-index.mjs.c6b8f796.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (35191), with no line terminators
Hash a7f1a1f90ba847a9df1cf8f820bb0df2
4e7e1313164829dcfdf6da6f817f40244e02ffda
b661fc88bf689df1b62710ede388dd6a28f5aafa7a4537d7768a490dc47bb271
GET /js/v-index.mjs.c6b8f796.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-8977"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O6K1vpxtDeo%2B19Lk2oxOQgZr%2BWgCovgEt%2BPVvg0Bjr9QxwK9njHST1rg%2FPdRMDGNzNHAQdDOIsnqnXBVr8kKs3KpoNbjAt%2FAUAbL3fe1sQLF30uLZBAN88nPLCQn8U0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a705695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-6.webp
200 OK 1.9 kB URL GET HTTP/3 gleedrep.top/img/comments/person-6.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4
GET /img/comments/person-6.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1854
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F6XYZgJeKN7WliG0wtDV7%2BTtHrTDnMHc2cYPxuDhwou145r6K8kcITBWpozqaZM20%2BdFil%2B3FkRCH0pEnkZixmX6Vz%2FUSVLKaMTlawUTjW4l4XmKtEvnA87enVRDbhU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f215695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-12.webp
200 OK 1.4 kB URL GET HTTP/3 gleedrep.top/img/comments/person-12.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e
GET /img/comments/person-12.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1390
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4NwVjR0hsh%2FVKzuECiqLL7k6P1vP4tpUEty6GXniYjB6CwcX%2B2D13RKmeT01NafHuu%2Bd8XuP%2BoPeqxGl0O1D0rUQESAtIZsIT8YOKrgNdl3ZGe2QwyjRGhulbAyC6VM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a4f2d5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-11.webp
200 OK 1.5 kB URL GET HTTP/3 gleedrep.top/img/comments/person-11.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
GET /img/comments/person-11.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1526
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x82RpIAFrCWfn0eVRAEv8ZRIT0jZgQJVHgr%2F916o8XEjmEb1jpaF4WlAQmRHJ9yY5YFaV%2FI1RQ7JZUN3ICcfvaN1iEc4qZqbSXe05LVoBrHKpV6pIO1oW0Mr%2ByuVE50%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a4f2a5695-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 64974e31d5d11a422a43482c1cc264fe
29df1e5938da864a59478f5aaa0b25c197a5b097
1c96fb2945985f7073b63e5249b8557af232bc52229fa5a1230317c17b8736c4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 06:55:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
gleedrep.top/img/comments/person-2.webp
200 OK 1.1 kB URL GET HTTP/3 gleedrep.top/img/comments/person-2.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
GET /img/comments/person-2.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1104
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=29AcCg%2FiGBx497ikZmbO5orTuflaKNpQmzXoY%2BgLkJJtJpcgYf%2BaWDfqXdkb6aZsuJm1NaIS7m%2BJ6NlteIr4EPXxwBpdwcuCIbf2zs471fbmTHgsfcHFCUYeK%2F3hDrA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f1e5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/v-immer.esm.mjs.775845da.js
200 OK 6.0 kB URL GET HTTP/3 gleedrep.top/js/v-immer.esm.mjs.775845da.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (10497), with no line terminators
Hash a9b55caad0866134c730f46bb9ed3a6d
d9341ec11cd3e427871deeb1260e5b74dfbb44dc
c85b6ebe2e815c85c04f96491b0d74e99f31388d8a507bcd1593f2ccd303373e
GET /js/v-immer.esm.mjs.775845da.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-2901"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uae0hvgXOh9X2dctYHRdtf6E2ljbi8r6uhEiPVr6DWBqX6JiITX%2F%2FA3mp8ln0eoz11SYDW3M4tqZQ2WW9wHt9zaJIN7JUOhlUJmkMhJUQx55JsOKTrUrJ%2FPVmMIdnio%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a6e5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-14.webp
200 OK 1.7 kB URL GET HTTP/3 gleedrep.top/img/comments/person-14.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
GET /img/comments/person-14.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1672
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ATa45dh81Be96e8PkGo3EpXvnz05%2FFjHla5eCAPu9jGQqjwK2nGrt5GuJTDP9paCVMjmRCK0nZVKh4Duhb5zhBD6X36Zp%2FxZito1njHudKWGjiimWXoJwCrCKhEUOxc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f1d5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-8.webp
200 OK 1.8 kB URL GET HTTP/3 gleedrep.top/img/comments/person-8.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d
GET /img/comments/person-8.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1802
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BW5soZDdgXqCEwcNTbHCerWrEapRhbtGiCUJC%2B%2Fn9x6wWlTDOv8Y2gdnr%2BBuLSD9ta2XGhbLB7fLrV4DOQoLAYw%2B8bvK7eCSgICSbg0Yt34sPL%2BkxTdIuSk9aVkv%2Buw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f225695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-3.webp
200 OK 982 B URL GET HTTP/3 gleedrep.top/img/comments/person-3.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
GET /img/comments/person-3.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 982
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aXarr5O0pZC9QlP07bYEXUgORD7dgFgTleesBXXcYJbZG5MLNhL1MOXm3TVwPuJK25NiMawManTvxl6lZcJ2LAW%2Bp8lA8Ivnr%2FttTQSf6HIYNzI9fd%2FkXwlsW1dn8ig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a4f265695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/favicon.ico
200 OK 690 B IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/x-icon
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=U6vfFp6JnMBAAx6XhZ1kSBFievOmpI9zYkG%2BI1pd4lcuJH%2FXp45Kg6TzMVUy7nsI3wlcKbASWoSEHfuLPdCnu%2FKYLKTwzpp%2FXJzkwk9VP%2Fagg4klNDXZP1BbYf5fMJY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80982998edab5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-10.webp
200 OK 2.2 kB URL GET HTTP/3 gleedrep.top/img/comments/person-10.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332
GET /img/comments/person-10.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 2222
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xh51WHnNoVGGVLbjbisYqOsvTMrwdnFmF2jYZ7hFuP8cxcft%2BwSUfeSRFAYCJFCjvt8OJyeXaLRDTLfm27RIHCWZsqGKnN8%2Fu2nbjZoIWfyhOH7LsZGtVw%2FjSmFDhZY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a4f295695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/_global-config-sd.ca890aa7.js
200 OK 2.3 kB URL GET HTTP/3 gleedrep.top/js/_global-config-sd.ca890aa7.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (1864), with no line terminators
Hash a82d6db31bbc3fe84f393353c1b02a38
ec96f539ccf75ffed179bbfcef236d95b0577492
872d72453acb1662ee9cd3c46a6774491946fed48a53786e415745374809ef06
GET /js/_global-config-sd.ca890aa7.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-748"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=g6xQjW%2BRyDKJqaB%2F7y4gTXeM8SsuHFDgLQXuN8r2mvjTnucsg6%2BK4ezxYCfIdh%2B6EuVDXL3ipEeStzvHsdAhxOTvhYVKP2Dxc%2BAxNkQ7tGminC1rxWtqBIzX4WWVJ4s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829960a535695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-9.webp
200 OK 1.7 kB URL GET HTTP/3 gleedrep.top/img/comments/person-9.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
GET /img/comments/person-9.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1654
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lyTZh1gNzkO7Kfao25XNu3AasrMQ3fpNGH8RbK6EMIhe9Ct4qprk6EITnOkcxazSr0oPMrKFGIRJ8L6SZMHBB0bIez3As6EoF78hoLr%2FmGIiyU7aMwoeHUVd5RUva7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a4f285695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/_each-land-config.55456aef.js
200 OK 20 kB URL GET HTTP/3 gleedrep.top/js/_each-land-config.55456aef.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0659c7e1ef2cf3ac5cfa7dca585be96f
f414c1ede0fcafb7a4f656955e958c78e27d842b
eab0f7db0e4581057d4a7eadfd5630dab661ec933bc800c5cba592d912b47f3d
GET /js/_each-land-config.55456aef.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72713
etag: W/"650996d5-11c09"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L1SPo7c8AEdvP6AKrfv1GI7REgV6uiWklE%2FiwqrsarKYEWC4lavwVD4VhK067HS18nwi3%2FCzQu7prYm%2FX9fQXLeOUbpHLXKhCJL9jP1k4frIlHOs0eEt8uah2ph3gYE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a6f5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-do
200 OK 179 B IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 4aa6fc9a334ad98cdf63ee33c34970b0
access-control-allow-origin: https://gleedrep.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 182
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3dbfd9a7ec44ebf2e2f6fc68621480c4
access-control-allow-origin: https://gleedrep.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 69
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: b4108237c8d3ef4882f754a2af2681f7
access-control-allow-origin: https://gleedrep.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=gleedrep.top&var=4136558&ymid=3630&var_3=null&var_4=null&dsig=&action=prerequest
200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=gleedrep.top&var=4136558&ymid=3630&var_3=null&var_4=null&dsig=&action=prerequest
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint4C:A3:DB:F6:1D:A2:D6:78:AD:0C:8D:D6:4F:CC:11:8D:EF:D5:AB:B9
ValiditySat, 26 Aug 2023 05:13:11 GMT - Fri, 24 Nov 2023 05:13:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=6163203&is_mobile=false&domain=gleedrep.top&var=4136558&ymid=3630&var_3=null&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:23 GMT
content-length: 0
x-trace-id: b0d75dc7ac03d1acaca0317c7607f3be
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 06:55:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
200 OK 186 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type ASCII text, with very long lines (552)
Size 186 kB (185696 bytes)
Hash e2fe3524ee9bc3801e88f30301fde700
ecdb5bdcebbbaad69868ea78033be35ac9b20a58
a36746585bd5af117aff1cfeec39c2a810d6d9c601ca083d132786abf09d01b1
GET /recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185696
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 16:50:43 GMT
expires: Tue, 17 Sep 2024 16:50:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Sep 2023 18:47:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 137080
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash f53b2b7aa921ea170cc18d0871f87f8b
c38b9e04da43fd752005c1c82a277856f322e366
e204019f2aecb95f0b6dc967adfa49dbbfa747eb080814f62b8e91f218198c73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 20 Sep 2023 06:55:23 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
471 B IP
Hash bf2ff9fe48c606169e16ece0c74a3137
6cbb7558a6cb9bef14f355adb55746db54e71cd5
ac8cc7415b293daa75aa9396ea2b2fb617c944a1259aa94443fb80f6626047f3
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 20 Sep 2023 06:55:23 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 19 Sep 2023 15:22:13 GMT
Expires: Tue, 26 Sep 2023 15:22:12 GMT
Etag: "6cbb7558a6cb9bef14f355adb55746db54e71cd5"
Cache-Control: max-age=548357,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 8098299e386556bb-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1470
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 20 Sep 2023 06:55:23 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://gleedrep.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
gleedrep.top/rhd?rb=wrYZrbUEpHXV-8K0-3_hcUBx9QT0Uz6tU7mwGi9p5dTfg_Sb1Qi_chSfFU3dEQuoNVRj66XXzTzXWo0CEu4oLVWR3A2Y07SNAK8TMj-0jMYGLrvWW8i9KWdONq16ip3XerLev3eVotrRMW0h0Pn0Cvzg3_AeHKj2BW8P8FX7nnJ0yVJ2gd7mUkNJWgJt-qRkhOjEXWcSxf9MzaWOhBQwJw%3D%3D&request_ab2=150012&var_3=&var_4=&zoneid=5223498&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fgleedrep.top%2Ffinance-survey.html%3Fz%3D4136558%26offer_id%3D2025%26var%3D3630%26ymid%3D588bee21n4kvcdz9ea%26utm_campaign%3D3630%26utm_medium%3D4136558%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top&m=link
200 OK 3.8 kB URL GET HTTP/3 gleedrep.top/rhd?rb=wrYZrbUEpHXV-8K0-3_hcUBx9QT0Uz6tU7mwGi9p5dTfg_Sb1Qi_chSfFU3dEQuoNVRj66XXzTzXWo0CEu4oLVWR3A2Y07SNAK8TMj-0jMYGLrvWW8i9KWdONq16ip3XerLev3eVotrRMW0h0Pn0Cvzg3_AeHKj2BW8P8FX7nnJ0yVJ2gd7mUkNJWgJt-qRkhOjEXWcSxf9MzaWOhBQwJw%3D%3D&request_ab2=150012&var_3=&var_4=&zoneid=5223498&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fgleedrep.top%2Ffinance-survey.html%3Fz%3D4136558%26offer_id%3D2025%26var%3D3630%26ymid%3D588bee21n4kvcdz9ea%26utm_campaign%3D3630%26utm_medium%3D4136558%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top&m=link
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type gzip compressed data, from Unix\012- data
Hash 0c1025d67a05b456199441587709a8e1
01834c1015019763568a9d8132e21396df8bece6
80dbe2f8589114046917e1ea087392cada4bbd7ce82cb4d5283af70cbf7d95a5
GET /rhd?rb=wrYZrbUEpHXV-8K0-3_hcUBx9QT0Uz6tU7mwGi9p5dTfg_Sb1Qi_chSfFU3dEQuoNVRj66XXzTzXWo0CEu4oLVWR3A2Y07SNAK8TMj-0jMYGLrvWW8i9KWdONq16ip3XerLev3eVotrRMW0h0Pn0Cvzg3_AeHKj2BW8P8FX7nnJ0yVJ2gd7mUkNJWgJt-qRkhOjEXWcSxf9MzaWOhBQwJw%3D%3D&request_ab2=150012&var_3=&var_4=&zoneid=5223498&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fgleedrep.top%2Ffinance-survey.html%3Fz%3D4136558%26offer_id%3D2025%26var%3D3630%26ymid%3D588bee21n4kvcdz9ea%26utm_campaign%3D3630%26utm_medium%3D4136558%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top&m=link HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true; prefetchAd_5223498=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: a8d7600f7c3e24f995df0d77d301df2e
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
oaidts=1695192923; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 06:55:23 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xtoJfLQyfXXCkqakDnV5lj3hCXoWO8OurVZs9Gdslec%2FfdsfuBkbJD4uc6ILzDxqP%2FavM40gDnxA7qyQlSKND45A%2F03Yimhb6zzlXONDp2XLaWjgylJPvSdfzrKohSs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a8f7c5695-OSL
alt-svc: h3=":443"; ma=86400
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
43 B URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:38 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:38 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
gleedrep.top/scripts/prefetcher.js
200 OK 11 kB URL GET HTTP/3 gleedrep.top/scripts/prefetcher.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (10761), with no line terminators
Hash b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
GET /scripts/prefetcher.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:55 GMT
vary: Accept-Encoding
etag: W/"650996d7-2a09"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pxg7jfa4%2B57vRIvyleIpfOr0dFRGtItxgR4Sd0f4xEjhFlEOHS%2B5Mo%2B6A8egonnn761MdtFnB%2BrKYCPgDTS3RRxilXWwroGMbGRvWT%2FDMo1zCc7%2FDrIEPUm%2FDZIRX6I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829975b965695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/rhd?rb=yWzvRnc8IPxIYjgqJGagppAb2OWGcgnmPmQs32-rluZ0gQp_7C0Oc02dmFrXMdolJDxbtjrtBqpz6_ZO0afRKffBWuSxqqT-jioumT4rbESd7uW98nQVyn_0hQ4qBoRAFyz46yPgVfk1wKQJCoFJf4niDhP0d4zB-L4a8qevRqOAREpxjoiwaQ4tsye08DDk6pNSe8vE-3Lj8RYyeMcL9Q%3D%3D&request_ab2=150012&var_3=&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fgleedrep.top%2Ffinance-survey.html%3Fz%3D4136558%26offer_id%3D2025%26var%3D3630%26ymid%3D588bee21n4kvcdz9ea%26utm_campaign%3D3630%26utm_medium%3D4136558%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top&m=link
200 OK 3.2 kB URL GET HTTP/3 gleedrep.top/rhd?rb=yWzvRnc8IPxIYjgqJGagppAb2OWGcgnmPmQs32-rluZ0gQp_7C0Oc02dmFrXMdolJDxbtjrtBqpz6_ZO0afRKffBWuSxqqT-jioumT4rbESd7uW98nQVyn_0hQ4qBoRAFyz46yPgVfk1wKQJCoFJf4niDhP0d4zB-L4a8qevRqOAREpxjoiwaQ4tsye08DDk6pNSe8vE-3Lj8RYyeMcL9Q%3D%3D&request_ab2=150012&var_3=&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fgleedrep.top%2Ffinance-survey.html%3Fz%3D4136558%26offer_id%3D2025%26var%3D3630%26ymid%3D588bee21n4kvcdz9ea%26utm_campaign%3D3630%26utm_medium%3D4136558%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top&m=link
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3255), with no line terminators
Hash 776ea63195f609f733f0c568b94990d5
92cab2bb71378b86c544a8f477cbdefc372d0598
7bb3d50efc8fe5d151bc6f37f74ed0d609f2aecf87dea41e26b55839f954b373
GET /rhd?rb=yWzvRnc8IPxIYjgqJGagppAb2OWGcgnmPmQs32-rluZ0gQp_7C0Oc02dmFrXMdolJDxbtjrtBqpz6_ZO0afRKffBWuSxqqT-jioumT4rbESd7uW98nQVyn_0hQ4qBoRAFyz46yPgVfk1wKQJCoFJf4niDhP0d4zB-L4a8qevRqOAREpxjoiwaQ4tsye08DDk6pNSe8vE-3Lj8RYyeMcL9Q%3D%3D&request_ab2=150012&var_3=&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fgleedrep.top%2Ffinance-survey.html%3Fz%3D4136558%26offer_id%3D2025%26var%3D3630%26ymid%3D588bee21n4kvcdz9ea%26utm_campaign%3D3630%26utm_medium%3D4136558%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top&m=link HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true; prefetchAd_5223498=true; prefetchAd_4292573=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 7527381c00da5b0ed924b509c7000a1d
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
oaidts=1695192923; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 06:55:23 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lVmsb0V9%2BbylPE3o8YU8AFh6%2B7SQqOWsoBL6y6IGe0tRvmu0K46ZojdQpPDZpQXZnK7ywmtsQ3XZFv7RAj90sPiVm3WJGvQrVoIXGEz4qCV3HDcGED8WLFp7DK8isNk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299e0af05695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/sw/sw6163203.js?var=4136558&var_3=null&var_4=null&ymid=3630&ab2_ttl=5184000000
200 OK 1.3 kB URL GET HTTP/3 gleedrep.top/sw/sw6163203.js?var=4136558&var_3=null&var_4=null&ymid=3630&ab2_ttl=5184000000
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash 849a6c66f58cb89bf2ff6062f565e221
bf062cc02843667564e3b1ac1d13deb9c5206311
5779075245c78b9848a240be3ee8d4ea5aaca38e1642cd6a6af896e58663ba47
GET /sw/sw6163203.js?var=4136558&var_3=null&var_4=null&ymid=3630&ab2_ttl=5184000000 HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true; prefetchAd_5223498=true; prefetchAd_4292573=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Wv3qKCZlAp83%2BuM3x0XPz%2BkoFXk0uOLFCP5e%2FPg39%2Fj0rlP4tpUX5hOFZ95mIXD0upPNorgtjhEes8uxWASKTfeSm9VMAA3zRj0ICjDxmoCanoxKOVIyTS4jhVnLJm4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299e8b5e5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/v-react-dom.production.min.js.d40305c2.js
200 OK 129 kB URL GET HTTP/3 gleedrep.top/js/v-react-dom.production.min.js.d40305c2.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129351 bytes)
Hash 3f5245acf0ca449450dbdbc1247ae6fc
0e46626d553bc183f671079605dac9816fbdff4e
a3e77eb0f29044ac881d27eb49082374bae2a0cb9407576bde0043cd70814cd5
GET /js/v-react-dom.production.min.js.d40305c2.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=129354
etag: W/"650996d5-1f94a"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RktoJfZ5yJvCSnsClSuZvux94sQK%2F2%2BOG4YEiNSSdfVCESDFFBcr%2BngHJvc0EuQMUkg0rtzZ%2BX9qioJ2E76KQQkPIp20youlpJD5u1ewCwBkpWYPS%2FmqEkQuxxZH1eo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a715695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/config/data/sd-2025.js
200 OK 9.3 kB URL GET HTTP/3 gleedrep.top/js/config/data/sd-2025.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (9591), with no line terminators
Hash f76392636f99eb86aa66f5fcc662420f
63f146ad559b72c6f83f20077a6ed7362d2b1f71
5a05bf0e426f0d470ac2e5b2fa1be767b0582a1631f806ad508d0e53b11c4739
GET /js/config/data/sd-2025.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-243b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KjbNnedTmLsQoL92aXtkfKJAJeNNJR%2B0vdN3Ir3BJyZzuNKtxV4AEjvbasOJHVO8aOe365eNdK6FAPo8%2FWZw5b9RPMEND2QvVCoZJFMAcMLwZ6fDQIMPlAcx89R3Avw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829984cc95695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/_rtc.5d12e065.js
200 OK 11 kB URL GET HTTP/3 gleedrep.top/js/_rtc.5d12e065.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash c6bd49904cc559c9bc68a03432ad510b
b89b3d9fc51068205d1af84136dd4f29591c23b8
d34dbd1f5646dad2b509951f30c0f475ed4ee59e40ced9825762c279619bc539
GET /js/_rtc.5d12e065.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-2bb5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VZg0llfVchZf7lHyJnrAOEatJlrwGEq9OytKYNi1l43xEHilMgYTVRdN02HSzi13hrUhFEeEmVtRQ%2BwCfw7LH6JWDf2Svmkv705VST34zV05uzqcgop8FwOutUquNyI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829960a595695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintB4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1
ValidityTue, 25 Jul 2023 06:29:27 GMT - Mon, 23 Oct 2023 06:29:26 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash d3384b79b0405e0b72c69e1219e2d6d1
31fa61a6dde822b6ac6b16524a51a70a261df7fe
92a5f817d5cb3f10a536506db59882c2487e9221db4531a8c9c6b2d24699e32a
GET /gid.js?userId=ps167uu6qvou2cwqnqvoobuhdpvkpvhu HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://gleedrep.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:22 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
gleedrep.top/js/_is-browser-supported.e5c37b85.js
200 OK 3.8 kB URL GET HTTP/3 gleedrep.top/js/_is-browser-supported.e5c37b85.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (4049), with no line terminators
Hash 4b3d3d067a39a2fdf25c097dff3fb0a5
e414e96e16ea37b62c54dbe0a07e6b5ed5bce13c
d1619b1a6c847ca1ad83a50f1b631d0c8d09bd6cd1d0f050014e5718e3209509
GET /js/_is-browser-supported.e5c37b85.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-ee5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iXgPF3Ue5nJcA1MMnXHeBadbw5ZnuyWvV7FTxnYn%2FrPw6jBxNsnf0xzSq%2B%2B8eSsMwWdo63ivqzx2ILt7c6k6JkGIaHOa63Ly%2FqAZoKtzj34pmCeiwjBVwqQz8kin15s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829960a4f5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/v-index.js.36b291ca.js
200 OK 41 kB URL GET HTTP/3 gleedrep.top/js/v-index.js.36b291ca.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (40879), with no line terminators
Hash 1946258710afc5f07ad8dc1ac8546efb
b5b0e50a053c368f3ae65fddf9fe072e4ceefab4
c7cff67c9f67a2d76980471f7e48a8ae8725757c21c0546a26ad97100b554f8f
GET /js/v-index.js.36b291ca.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=40882
etag: W/"650996d5-9fb2"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KAikmnSjrxW39QUupMP1nL5DClp6X6eQm%2FjfFGRNc1yMzIdv2FM3%2BtQG57IIb80XP1O8%2FRjLFJuvMFwUZrYTQpbBqYFp4cxnM%2Fc28FGJVz%2BEGTrkwMXSetczLRRnlV0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a625695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-1.webp
200 OK 1.1 kB URL GET HTTP/3 gleedrep.top/img/comments/person-1.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
GET /img/comments/person-1.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1122
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=luCkvzaw4cBX%2F1ubd%2FwRsM%2FbfTEmEsEVKSG%2Bn06y5pkJ7qsryQtV6pVSnTO7ZfEu5ZoVbS2xlBI96thWGk13fgspHBNi8KbMVA%2FmMZ68kB%2FNAR4hMzqrOnUXSRPffRA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f1c5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/5/4292573/?abt_opts=1&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top
200 OK 2.8 kB URL GET HTTP/3 gleedrep.top/5/4292573/?abt_opts=1&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3020), with no line terminators
Hash 96124650116d55935409d3f137322da8
37ed35286ad591fd820deedc8bf0d6f5d7c3e7c9
0c43d02f8110a8406d1694c7632399c5c0d5380b8fe7e8d488e12d511361bcfb
GET /5/4292573/?abt_opts=1&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true; prefetchAd_5223498=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 9b1cd9109b003abb3598420cc6aa855e
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
oaidts=1695192923; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 06:55:23 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SJwMUGNEchten3M70VJ3k8AN%2Fd5Pz7h8Fj%2Fu5XlpQNh29Yz%2Ba0tVYzJnmQZ%2Bo3XRGtxcnsUnt4UvuIKeCieCsApct2Jmd3%2BrlK2hG%2B7dHfnH5ibFCKszv%2BBWOBDElA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299c08d95695-OSL
alt-svc: h3=":443"; ma=86400
offpichuan.com/track?offer_id=2025&z=4136558&request_var=3630&variable2=588bee21n4kvcdz9ea
200 OK 166 B URL GET HTTP/2 offpichuan.com/track?offer_id=2025&z=4136558&request_var=3630&variable2=588bee21n4kvcdz9ea
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash f09d6c46e03cc0e1f83b9bcaa27f5cd3
9b37c4cacb359bcb54c9d12365c64a969d77c095
add9b154aaad6a50ada6ef6a624eafa09c63ea73b5e3c834557c6f3b54744525
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /track?offer_id=2025&z=4136558&request_var=3630&variable2=588bee21n4kvcdz9ea HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json
content-length: 166
x-trace-id: c29e2a8f4e775052c7795cfc8c8a1b11
access-control-allow-origin: https://gleedrep.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
gleedrep.top/img/comments/person-4.webp
200 OK 1.4 kB URL GET HTTP/3 gleedrep.top/img/comments/person-4.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
GET /img/comments/person-4.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1356
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EHTbeXtn66IR6EvXFlwI66DyoTnh2F6mKRzN3Rv8mJt1saf3Kv0hPKtY8dQHMWgLbMgyqVZPFS7%2FdaKpQZtZLjjI2bcEDSMaaylHN8DKIjXzywr9tWkVT4D7UFKb%2Bio%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f1f5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/5/5223498/?abt_opts=1&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top
200 OK 2.8 kB URL GET HTTP/3 gleedrep.top/5/5223498/?abt_opts=1&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3020), with no line terminators
Hash 58456fe5b807b41de8b621d9f37c6362
794d7145745957107724fcae99fef69e8017cde6
b0c4761989a11ff78475fb808a9bb6f78acdd188d0e96d36991bb0c0253eaf43
GET /5/5223498/?abt_opts=1&rhd=1&var=4136558&var_3=&var_4=&ymid=3630&s=&ab2r=&os_version=&oaid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu&domain_onclick=https%3A%2F%2Fgleedrep.top HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 7c219bf5b48094cfbb1912baebbd093d
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
oaidts=1695192923; expires=Thu, 19 Sep 2024 06:55:23 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 06:55:23 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lOYbatktIi%2Foie9%2F2iSMDBewb5EO2G%2BneTz0rvDLkKAGch0h5bGgi9x38xUyF2HLvrAeOOLyretqTr8zimUNFp7uOVa45rGw%2BTiMVS3mvnwwCUdI7QYoJFFYFT6mxqA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829996e0f5695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/_core-survey.03bfbbcd.js
200 OK 227 kB URL GET HTTP/3 gleedrep.top/js/_core-survey.03bfbbcd.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
Size 227 kB (227162 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.03bfbbcd.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=227165
etag: W/"650996d5-3775d"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=l%2B60FkFDbdViJwrEe1BxTPPgkeQmB113gIc97WXBJV9ObBxU6W7LExVNTLgPDV7zo2r1lH2ZAhoMNTxvspGsxPAIE7XXuy5GKDPSC%2BxT676H1RTuGokt0IfsFmE%2BMl0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a725695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/css/survey.9a31db7e.css
200 OK 67 kB URL GET HTTP/3 gleedrep.top/css/survey.9a31db7e.css
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 58ca444e9100e729279bd786b2b7e725
01b08a8f9efeac55f53c876516732ba1cd15de51
6e200f8f5e1d0e36b17ffe7107ca3d65ec6c23ba9e8e21d00c862f02b3f3618b
GET /css/survey.9a31db7e.css HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=67081
etag: W/"650996d6-10609"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MXsuAIGQqeEm3qVmlE8a8S0t2KwnLSB698GYi7%2FlWI%2FVRIq2I%2Fu10w%2FZSPFzBKHlVGUl5ezfDIBZ0Vofc372oniH6WMxT50xCjRxInDBkCGCI5dhj7NiUk41QUQRI7E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829962a7c5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=4136558&var_3=null&var_4=null&ymid=3630&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
200 OK 27 kB URL GET HTTP/3 gleedrep.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=4136558&var_3=null&var_4=null&ymid=3630&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (26946), with no line terminators
Hash c4c761125651e4efaebea8986cfa7d2c
576d06df4b5da15d218ee3ee081cc8a808369e07
5e7c10f10f6c51e3c356a601e33f8102d1ad17a9b24734542f691fceb73a6b9a
GET /pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=4136558&var_3=null&var_4=null&ymid=3630&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-6942"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0RlS5GzDNaKAAB7GfXHq86It4a1d9KPNKumChVNzUqSZEU%2FdzF2aRgHpX%2B2uZHYUt2ROL6YzNrsxkSATPCulSuEnC%2FNP%2BloWvrtdidGBmjNLr29053JMUtEJpHhg6Ns%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829993df65695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/v-redux-toolkit.esm.js.86d657a2.js
200 OK 11 kB URL GET HTTP/3 gleedrep.top/js/v-redux-toolkit.esm.js.86d657a2.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (11315), with no line terminators
Hash a4fe018340af9bd999c47690bff0c0a3
5c64261d732ab851676fb5480733bc7a3a9f8a9d
26608974055030ac39ff50090c78dd6d4ab237908716255f07c064a0ef4ab6d2
GET /js/v-redux-toolkit.esm.js.86d657a2.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-2c33"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tslCx5AwpjFAy4aA62xE0eaLCosw56tmQfRE138bvkedHBIpWLUFFjZATCxFqBnfIhmHmFMAnDZFczSgJIuNLj6YRr7wB0Ve3zqz23mWW0aK5AhxFrCFOq7xd%2FgrY6o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a6b5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/img/comments/person-5.webp
200 OK 1.8 kB URL GET HTTP/3 gleedrep.top/img/comments/person-5.webp
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
GET /img/comments/person-5.webp HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; oaidts=1695192923; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: image/webp
content-length: 1846
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2ByNgbOQVIC2qE0NZXC2hwYpxis98In0%2F7iy7DGywkDLKpMEcCJ8%2BTyqrQX%2BHHq98p5qX67GaXyeYTSzHkxfMEHUs3IrUd9bAEAxhg%2BnYgkGs%2BrTAbUMUlpq3XWOyr7k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8098299a3f205695-OSL
alt-svc: h3=":443"; ma=86400
gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
200 OK 5.6 kB URL User Request GET HTTP/2 gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5797), with no line terminators
Hash 97870cf20532f8fc5bef6ba114b4d263
3adbfcd7619bbced62e46026f42210252600a1f7
918b076b40e7e873b12706fc178d735bf62fc4334b210854e041408973a43cdb
GET /finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: text/html
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=acCDgTiCCjZsRlNbDmWvzjeEBZ1PiHmZlv1yXZQ2FIv5oj3Znx2Ps8Rf51IneKuyg0XIwqzuIO6aS98JO1O4n5wJrUGBDmLUhDuzTab009RQyyqQQ6%2FFV1RsN9xrssI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80982992e8b9569f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
gleedrep.top/js/s-storageService.js.c2d14bf0.js
200 OK 2.6 kB URL GET HTTP/3 gleedrep.top/js/s-storageService.js.c2d14bf0.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2624), with no line terminators
Hash ef49c3d67dcb94c0d4effcb46ebd220c
dd5dcb7fc99b6836df7656a34567ab1db3a1d4cd
6804d4fe9595bb423186d8d6d2cd2151515d3dae7d6de69ce43aed6b24eb8e9c
GET /js/s-storageService.js.c2d14bf0.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-a0c"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c1Uceg%2BVgWoPMGyE7U9JsR0keFCXteBqhUxOCOcdjzYd%2FXGXwunN9tEE4kD3hne5kpR8Av3CIDx483mx%2BnPb0Fmfn%2B6l6T7z6GEI3EzGMULKe3vv1Ap38Lgo8Ta48ts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829961a645695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/config/comments/en.json
200 OK 4.5 kB URL GET HTTP/3 gleedrep.top/js/config/comments/en.json
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type Unicode text, UTF-8 text, with very long lines (5173), with no line terminators
Hash 50680109e350a76b2bb8131cdaeb735e
0c14dde15f13c0deefd1ff3eb8c4608e73d133b6
a9ebf6b7ceb48bd6c63b99320183934f2b183af64cc7f27fd85ebe7191d92e42
GET /js/config/comments/en.json HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/json
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PbU6Q1eaL%2F0aiIeP873azfyUnFP%2FRu9%2BePOJqyfFZ%2FoKuF3%2Bwoydnq1YEcxU2u0S7NUHch7hSGumf%2B69kzmYLJbLzlItPZnkMF9%2BWYvZrjOYP7JKaEFKKh0hK8V05zA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829994e035695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdntechone.com/stattag.js
200 OK 19 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 06:55:23 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 753
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BhizS0o8faitXD2NPo0ZkRzI%2FYfKC8e50iLhNkkGVGRTxYbhrJwkF7Kd50sygAomiy6jM7GWtWhTqKM0cNVFUPg1WEhiL07SrxQ4RsR%2FJTOfzuwBhflRl1V2LfmdWcpYPw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8098299c0943b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
offpichuan.com/rotate?zz=4292526;4326653;5128285;4949467;5381239;5381316;5381339;5381332;5381307;5381330&var=4136558&ymid=3630&uid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
200 OK 4.6 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292526;4326653;5128285;4949467;5381239;5381316;5381339;5381332;5381307;5381330&var=4136558&ymid=3630&uid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4645), with no line terminators
Hash c28f108d6459206585cf7f88cbac5358
7b8cc8cce67900eb6bf115ce3e4706f767a98b9b
708f66bee8bc6aeea9d61dd044886bd561b8708bd7fa84547891cc711afd2d70
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?zz=4292526;4326653;5128285;4949467;5381239;5381316;5381339;5381332;5381307;5381330&var=4136558&ymid=3630&uid=ps167uu6qvou2cwqnqvoobuhdpvkpvhu HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://gleedrep.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 06:55:24 GMT
content-type: application/javascript
x-trace-id: 20c7b6e2520ac568bc8d1a31291cd6a8
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
vary: Origin
access-control-allow-origin: https://gleedrep.top
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=ps167uu6qvou2cwqnqvoobuhdpvkpvhu; expires=Thu, 19 Sep 2024 06:55:24 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
gleedrep.top/js/_prefetcher.d6d66ea5.js
200 OK 2.4 kB URL GET HTTP/3 gleedrep.top/js/_prefetcher.d6d66ea5.js
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (2484), with no line terminators
Hash d8081d6f211de7348b84bed51d3e7a38
560663a3284ecfbddb6c8f6e20d1e0ba01d7d835
035b1173e3f59b87a7157c4027d8fe8a616880d7b79788a6c4a98fd9b8b2e962
GET /js/_prefetcher.d6d66ea5.js HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d6-96e"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LBML7lHSgiNODmjIxnM2xyPpSlE5RC4Ff4rMw6Ak%2BEZ7s7HHdWfRR5wsYgYuIsH32uA5qiav1SCewF5QpFH%2Brxi9oXIpx1Exbo5UxnkrASxibJvcWv3zkPdcTfJisp4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 809829960a585695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
gleedrep.top/js/config/data/sd-2025-en.js?v=10
200 OK 2.7 kB URL GET HTTP/3 gleedrep.top/js/config/data/sd-2025-en.js?v=10
IP
Requested by https://gleedrep.top/finance-survey.html?z=4136558&offer_id=2025&var=3630&ymid=588bee21n4kvcdz9ea
Certificate IssuerGoogle Trust Services LLC
Subject*.gleedrep.top
FingerprintA8:01:5D:5F:B7:95:07:79:21:B2:9B:82:5C:EA:1E:1B:2D:0B:CA:D2
ValidityFri, 01 Sep 2023 09:45:57 GMT - Thu, 30 Nov 2023 09:45:56 GMT
File type ASCII text, with very long lines (2856), with no line terminators
Hash 6c2e62061cdebe9e9e9c34c6b68da4e4
9c909d9f24497a3e9fcc2ac598ff95ddeab631bd
e25d0e7e5ce511f03704109dec7dd916ab41eb486bfa215cdfd3996c128865ba
GET /js/config/data/sd-2025-en.js?v=10 HTTP/1.1
Host: gleedrep.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 06:55:22 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-ab3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v9FNIubtc7yx0mRXJYWkll6hWG%2B5kQgVUx6Pw5s%2BqUTL9VFiH8QJq8YgEaLoAZR03NJIRKL%2FdYLcLS4bymhhUAYd813HQGrLIx6II0htp1ucrJk5362hUggTersi6gc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80982997bc0e5695-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.40.69.165
142.250.74.132
139.45.197.248
37.48.68.71
104.18.15.101