formarshtompchan.com/favicon.ico
0 B URL formarshtompchan.com/favicon.ico
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: formarshtompchan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=273119853de64f2da6943857595c629c; oaidts=1683703817
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
server: nginx
date: Wed, 10 May 2023 07:30:17 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
pragma: public
cache-control: max-age=315360000, public, must-revalidate, proxy-revalidate
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=merge&userId=273119853de64f2da6943857595c629c
43 B URL my.rtmark.net/img.gif?f=merge&userId=273119853de64f2da6943857595c629c
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=273119853de64f2da6943857595c629c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 10 May 2023 07:30:17 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=273119853de64f2da6943857595c629c; expires=Thu, 09 May 2024 07:30:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
getitallsurvey24.top/js/v-index.js.9b795027.js
200 OK 16 kB URL GET HTTP/3 getitallsurvey24.top/js/v-index.js.9b795027.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (40285), with no line terminators
Hash e34ffe3c94b044323099d9eac395e670
517bdf3746d810b90b1a39d9dad71a5ea96d7d1c
9b654e8db241e91f2b62a06c0d14aa70dfa5717097c23820667483325ef45fbb
Analyzer Verdict Alert fortinet Phishing
GET /js/v-index.js.9b795027.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-9d5d"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2490
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4Ww1CpHpTcRKNSTaK6HFGYcpiDLFHkiVkNqfmM9QhmUzLt9w27VA7hs0B2haIdoAOpnK0fpBidWmQWr6O7vKT7jkNR7%2BiSwDnvLTxeS%2FK0Myzs5VSqfPY5i9nIQkzvb98pxINOPmNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dcbf39b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/_each-land-config.c6bfbc66.js
200 OK 15 kB URL GET HTTP/3 getitallsurvey24.top/js/_each-land-config.c6bfbc66.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (51675), with no line terminators
Hash cb70910d7d66d0381406c99dbb671e48
9da320eb097633a90e6dd174af65488c5db4af05
733cd3a65184db19e7fa4af85a991d6ea5e4c6a2396738cf1f6354a97b7a3e7e
Analyzer Verdict Alert fortinet Phishing
GET /js/_each-land-config.c6bfbc66.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-c9db"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1985
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YF4V9IhGU7nVxZNVpUU6hyzqzqijg8q2cGGTJh4VVV0CXqUVvFO21Q7MXl%2Bxj0hBHXq2NHBxfMCPvMiOGXNEA1P4JKj069LwsRs9gx%2BeOyI%2BLZMX7jRm7oOm3t7BkTVPy6ZOoZJkFw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dcbf40b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/_rtc.4f1fcdb4.js
200 OK 21 kB URL GET HTTP/3 getitallsurvey24.top/js/_rtc.4f1fcdb4.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash 474590cd99a87b22ee9eb19b1582fcb6
7cbecc1658a569a29305af7ea582c05ff9429d8d
2fcb0366f296c511013b429baf807380d268344f01ddc729ed7b589453f7c873
Analyzer Verdict Alert fortinet Phishing
GET /js/_rtc.4f1fcdb4.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-2bb5"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2490
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2BLq7GZq%2BCkHI03XEd6To1lJOpIv%2BrgysHnc5ERvNOVQQX2x6PYF%2F%2F2m3rRVaZvoTVoFZotmpH7G1Bu3HSREwcJE9j0dAeResBmkcfCC8fGsOa2kC%2BXVD0SpQZ%2Fz2A2RrxJ3vasTuw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dcaf34b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash 54f6261ce091b62b3a0dbb403a29acd4
d5e2a7583ccdbf8619822cdec9d460d42b4aeabe
a932fb80085d49730fa5c000a7ea2b871a2446c53b763074188ca0e555ef38b8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 07:30:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
getitallsurvey24.top/js/v-react-dom.production.min.js.e83bb12a.js
200 OK 43 kB URL GET HTTP/3 getitallsurvey24.top/js/v-react-dom.production.min.js.e83bb12a.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 4bd6d3f1e3fee3a93030462697007d2e
a878ce6daf0abd11500e8041d8a5e13194265685
cfb29f61502969dfc5cf57f698ad7a1d1a4167a93c75e3caf9542c7684082d63
Analyzer Verdict Alert fortinet Phishing
GET /js/v-react-dom.production.min.js.e83bb12a.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-1f8eb"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1986
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2F%2Fl9bnK%2FVPOGFn0RWSwIoeSj%2BjWvhyAIq%2BUbdNArcFkhHFStnEuhe0FAjiC%2F6IP6Wpu4JMsVimBIvQeYoSVkygtHTiMQI7ppcvvbhFGVT%2B85cdAP0xnQVWTmtA73AZFnWJpSHdMKQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9c9b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
200 OK 558 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint22:2A:81:06:18:D1:68:C5:1A:F7:E4:D9:FB:DF:C4:9B:E3:FD:BF:6E
ValidityMon, 17 Apr 2023 08:26:19 GMT - Mon, 10 Jul 2023 08:26:18 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 3a08115b188128623a5bbbcca9e5127e
af313f0756df7c20023211c7b2d5cd1d0882ad55
70131da85a97ecbfd4f28d48d74eb7ba4e0f7466b3e7d0d417399ec7ac3d9356
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Wed, 10 May 2023 07:30:18 GMT
date: Wed, 10 May 2023 07:30:18 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 558
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 0a27336c61aaddf2250f77658e480335
10c6df40f6125895cad4352516c35e0e23941448
c163d2a0a1c9c63f9b28bce8a9c4226e1749de4ff49a2ab230f15305eb5ad21d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 07:30:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
getitallsurvey24.top/js/v-index.mjs.0d8adb16.js
200 OK 16 kB URL GET HTTP/3 getitallsurvey24.top/js/v-index.mjs.0d8adb16.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (35051), with no line terminators
Hash f7da0c0042bf93d07d655d6e1e3fb49b
58c0a95a44359caf87ac29d4bd7e3ab794ed6ee7
2b01149b2601e5da8336c115b28fa6c9870c7a96d000b11179dcc0a7206a2732
Analyzer Verdict Alert fortinet Phishing
GET /js/v-index.mjs.0d8adb16.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-88eb"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1985
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OjTOCfTGaXbHTlibpCdEwPfT%2BEEUvNpoHZAuTqXh8BOcpK3zr%2BnF0%2BUNmkPj%2BDdCAj9UKCr%2B6QkD5p6pkxZq4UMQG6BUajXtVnB5csUIkRRgTVwAg7C%2FlNqytEBB2EAv97AbLYjeWw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dcbf43b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/unnamed.jpg
200 OK 1.4 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/unnamed.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-562"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NF8MwiYFZbnM4k2cTymJ3wdJuqJbU7yn4p9FAti8CiZGpsPLmDdpKaNui6dEZixEBOz00ZtvqeB8ltoA3CVcVeILoKH4tGQCjKxvMveQxc4JCDr9EBpLXwphzbUa3Z8QoNXSH1DDTg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e23efdb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/css/survey.2bfeef83.css
200 OK 17 kB URL GET HTTP/3 getitallsurvey24.top/css/survey.2bfeef83.css
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6454ed7a-1041f"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2491
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DCRkFrf3%2BtdZPb5Ev2Js4GGM0bCr8m3N3qISi7uPHDPv9LH3m7p3i8EcIQpNr%2B6bQPHRD0MDsX%2FnULbiGSq5rIcw%2BacSMe1glJAQxJH3dVExFQC%2FvaPZqCA4LfYh4C7nUxqSg4v0WA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dccf50b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-1.png
200 OK 6.6 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-1.png
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 8f9a954bf05965bb41cf97a7ddb7a375
de9db936bbea75043e08a55d1f371678fca2270c
a787bd40650924a7bbc61d6ea0bbcaddae4b3129fd8028b68c3629210e41e26d
GET /img/comments/person-1.png HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/png
content-length: 6577
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-19b1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1982
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VduB6j8Qd772%2B6EBIOyentdY7Oy0sV1KKa5RQNE8HuT1fReCa6OBrCXqdkuZg%2B8GnQBv%2B1ZuRtbIhB6dcbUZdsJH3C4Iy7MCNIcQHECTcQBNF7SiY2e9i7cz7mx9WTtwERyuvpHDcw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e23efeb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/v-index.js.9b795027.js
200 OK 20 kB URL GET HTTP/3 getitallsurvey24.top/js/v-index.js.9b795027.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (40285), with no line terminators
Hash e34ffe3c94b044323099d9eac395e670
517bdf3746d810b90b1a39d9dad71a5ea96d7d1c
9b654e8db241e91f2b62a06c0d14aa70dfa5717097c23820667483325ef45fbb
Analyzer Verdict Alert fortinet Phishing
GET /js/v-index.js.9b795027.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-9d5d"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2491
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xRkVueBp4Vd%2Ff2TlbMIwilLTsk3BnURBvyZVLYALd%2BD92kYmVUcWhUXESNl2ciDaRoZr1lm%2B1Kv9OEL%2FbKUzVAT8uWh6Z4Jn8IYzoXiI3hx17ZxnZWFzfYYNq1uMw6%2BASQspPXMBSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9c8b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-4.jpeg
200 OK 2.7 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-4.jpeg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 6cf64555e2de0ff8b5391081b648b89a
a32008bacf7f8cd3859eb86c6c8d36eeb15dbdf0
d4f513bf3a5691b900739cf79285d18ef09ef4b81eca648261b15a693d21818d
Analyzer Verdict Alert fortinet Phishing
GET /img/comments/person-4.jpeg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 2709
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-a95"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jRgGFv6niIhASr4jXBGkIFxwPpLZDKMNsIZwJycbxPAIHaBLRj0z95UMSLJxKvMpkf%2B54mNtzhDHYqX%2B1sB8iIs2hw2uW0Npht9wX2XwZgIwGF1js%2Fta4xp5xhBsCUwKoPJLc0kL8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e23f09b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3={var_3}&testinapp=4816639
13 kB URL getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3={var_3}&testinapp=4816639
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4701), with no line terminators
Hash 179c2eef534a5093e78cdab432e1f1ce
1490296e89f7720ee9e9eb51a1ae3d886bf4a5a4
8e160dad9460a0d22189e5c52b2709d34817bed07b3b7bd41eba85400edabb32
GET /finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3={var_3}&testinapp=4816639 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: text/html
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WWjEZUgDqNLMRJJLLRFsdwrpABdDkwSRFwXzY7yCxnWVqG8vwlQWhy6YP6ivG0liVyA4C2ogrgmWSiU9HzhspyunJLAD1Q0UeWD71d%2FwRfthcg3tCuW%2FfOO6EZfyVdP2pDInmRIIhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079db6dafb517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
getitallsurvey24.top/js/v-redux-toolkit.esm.js.42d1b656.js
200 OK 8.6 kB URL GET HTTP/3 getitallsurvey24.top/js/v-redux-toolkit.esm.js.42d1b656.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (11317), with no line terminators
Hash 1f5aa25be1aee2e99d2261a9660a4518
015e743bc83d55e4d249bfe0cd34e3dc77593d8c
d159ba98776fa9c734f0e49014bb7ef5b18c5f7554caca3111e13c5d91cf55da
Analyzer Verdict Alert fortinet Phishing
GET /js/v-redux-toolkit.esm.js.42d1b656.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-2c35"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1986
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4NnASAHAC6AFV8aiBBn2ZVUeA4m2U282WyCt3TEL2r98%2BymdIXcVSzHwYsZpTAm34Fz7lk1FPlG909%2BWlqf658pVqw3WKFmDurTI4XHgMapXT6FenFbfD3KrhSXZtkeGy43hdF1rXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dcbf3fb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-8.jpg
200 OK 5.7 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-8.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash 6b10e71656e51e27520e854712b44f1c
f78b92dded977e9f275aba726453138155420bcf
64588485da7d470991fdba6c20a6d05c7ad39f92cca72769a95cbe3d873e8edc
GET /img/comments/person-8.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 5748
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-1674"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bKJ6GM2CxHCxlyy4y1hjT50qS4dyfjMid17a3ylmV3MCWiqL%2FpWDbTQZrhW9I0fnghuhARS43C%2Fh5n1YyK%2FyCQWsNPhM2QeQDHtgXFY73XMlD4C%2Fo%2FyMORPTwOhVVLPkGhW9SWwh9w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e24f1ab524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/css/survey.2bfeef83.css
200 OK 18 kB URL GET HTTP/3 getitallsurvey24.top/css/survey.2bfeef83.css
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6454ed7a-1041f"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MAPf8OkxjXw3VRiPJtm1AzB9L6UCChzd51mVmThqjFo0%2BCMQkMI3H6o9N%2F9%2FM7XxoYRkvXDDgEj%2BamM5wwmrgq8htkmC1eXtyEcwPqoMrJEVqaDwikxln49Oug7SLRCqLvWk0M8%2FxQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dec9d4b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/_core-survey.88ddec94.js
200 OK 76 kB URL GET HTTP/3 getitallsurvey24.top/js/_core-survey.88ddec94.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 54c9cd50d186d64c85f6a75ac400fe5a
148d89415adf052b28f13199959c0371ce11f439
c5141e2faf25eb6fae66c0ff0692db677355ef6ac062747f12263e99dfa56f2b
Analyzer Verdict Alert fortinet Phishing
GET /js/_core-survey.88ddec94.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-32b22"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TVseLSXaq1Spt%2FZHtJ75krTAi5hYgUs8CJt4Bw9WpoIIM8ARFJPaKsUJZL7Doqk5cvByX61fXXt50IWU%2F9YZKNwL8sKy7T75jt2nKf5n%2BZNM6inatOyFm%2BlN%2BdPxt4%2FyCthLcsw2Pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dcbf49b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-9.jpg
200 OK 5.2 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-9.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 529370f9fd3b0f4da6c81ca91a931155
1a4c3e0e7af1ce30dc2ca18d48b5fc3f1b40aad3
cdf1b8dcdce4e9b76157ce90e086ebafb100063eaeb091e97087d97f5d0fb50b
GET /img/comments/person-9.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 5190
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-1446"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F5wwc6puu3tN9tOdDpojoZbxkPIlK%2FuRG98lB1G7C4Sjm0mv6vG6LXh%2FPVqXUT1xSc76MZxVEF67j9nCq0MEcQsaYDMmnyCIjvW%2F9xUh%2FInsvwfza%2B06cU4JNjF%2BTeri8ifikwAPWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e24f1db524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-12.jpeg
200 OK 3.5 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-12.jpeg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash c937339f4ba54ff7dc150b9865c29084
44206828ca23cbed303193bde1dfe47bdc532972
8e872daac17de58d352c9f4082e6e35af76a8b2138c142a8cf0fbacea195c73e
Analyzer Verdict Alert fortinet Phishing
GET /img/comments/person-12.jpeg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 3519
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-dbf"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1979
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s9dJMwoSTqHqn9nBD7Q12yihNoAG864K3zH7MYmHeeMc6F2PSLFO4v5DB9Xc7OTHNFqbDLBVPgnBigoZsEP%2FdZ%2FbwyTWMTJDXApuZk5lyt14G4eKWvqVIuHNFkUriYZstSSQlai7mw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e2bfcbb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/css/_core-survey.26c0898c.css
200 OK 8.9 kB URL GET HTTP/3 getitallsurvey24.top/css/_core-survey.26c0898c.css
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (3187), with no line terminators
Hash 2e6143d07cb0a0273cd0fded0cd7b430
4853285adf3a468cc8a42b1c6f17d8353cfef896
f2690b871425a66071365ba5be475a5089e8074dbdab7df95a71bbee62e2f5fb
GET /css/_core-survey.26c0898c.css HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3194
etag: W/"6454ed7a-c7a"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2491
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sZxR1l2L7pj0amoSgSckkaUTFBj5O9EaWxJM3uq6PQFGCtmnBiwczQEaH91Wkk0kgDHWw1Zz1BT3NkX11lEwXgCXvrpYr3J3xzXMCFCiVTNLhkR6MhKPWsCPzhVUodEbXWYzEyFPwg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079dccf4db524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-11.jpeg
200 OK 4.2 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-11.jpeg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 3924bdc784dc4947f52b779aa4d5a0aa
1e3f3fdd99490addd60014aa7327fe27c6bd5589
b3f882f57f9a213d85eb1c5c6a8a1451bd16dfcd9e4bd00e0a74584422dbd950
Analyzer Verdict Alert fortinet Phishing
GET /img/comments/person-11.jpeg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 4175
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-104f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FjY%2BqdcCo9zOyVyehgB61l4HYhOn9M3U6dYA14%2BkdD8n1catzNQ6H2F4cuUz6ochK9RkDV5nGWvgzhOKSHNgOnPAb1ck7iwiPt01rWbeHA5YsFXAAYB9zsAG%2BYz4NEHEeyQmoz4cJw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e2bfceb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.sectigo.com/
471 B IP
Hash 158e158149b53b6f517de0397df04ce9
ef0ff280eaa99438eb4c5f6a44ac197144177363
c8941fb6557c3acf270e294503c08ea3185f77fe72c92fa1ea6a0a7cbc1dc06a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 10 May 2023 07:30:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 07 May 2023 17:19:58 GMT
Expires: Sun, 14 May 2023 17:19:57 GMT
Etag: "ef0ff280eaa99438eb4c5f6a44ac197144177363"
Cache-Control: max-age=380378,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7c5079e2ced3b521-OSL
getitallsurvey24.top/js/config/comments/en.json
200 OK 1.1 kB URL GET HTTP/3 getitallsurvey24.top/js/config/comments/en.json
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Hash 01c72c627a3038e7869405d68e78ab48
c4542fe77a2753163565ba73f8370585611e4359
3f9a0e2b1e418607c88ef2c2c52f7c8eac9c93d5f10409719b9d8f12b3745c40
Analyzer Verdict Alert fortinet Phishing
GET /js/config/comments/en.json HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/json
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-11ad"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6c1ebPkUFhjKEoaEl%2BxdPGazzTj8B7wqfdYpc2XI1QOPTOr1U8Pj0oEsdx3qc9p94wGd6eGzgpVNJ74IfoRNRfRkWsmsWPRuhFo6KCikGBmcmvpl8TunzJCVTBMYZbSBQ3CtIsMi8g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e04c8db524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 07:30:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/1h-hbVSJRMOQsmO_2qL9cO0z/recaptcha__en.js
200 OK 166 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/1h-hbVSJRMOQsmO_2qL9cO0z/recaptcha__en.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type ASCII text, with very long lines (624)
Size 166 kB (165536 bytes)
Hash e2b80f16cd438a78e686d769dbff9b23
a054ffa1e3683691fda2208539cc1b99540f6df2
12c5a5f6c4176f49743e6fe7c298b563c375e968ff744745fbb60a7ba8bd1b73
GET /recaptcha/releases/1h-hbVSJRMOQsmO_2qL9cO0z/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://getitallsurvey24.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 165536
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 05 May 2023 14:02:44 GMT
expires: Sat, 04 May 2024 14:02:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 01 May 2023 02:02:20 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 408454
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash a6da0b8ec487c9ffd7bc4988e01ee646
f68270a827e68414eafb5ea37009e41de0890591
fe9d96f872b486de995156459e3005532ad6c6140975266bd43023286a6aa76e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 10 May 2023 07:30:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
getitallsurvey24.top/img/icon-survey.svg
200 OK 3.1 kB URL GET HTTP/3 getitallsurvey24.top/img/icon-survey.svg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3164), with no line terminators
Hash be0098d1d8838c0172c3107086338256
924bedb900cfbbf46aee1acc68b09666d1cd08b0
cce75f9c57b1c4430adecff06f7575ac7316c3381477a841f557646d0ac6af8a
Analyzer Verdict Alert fortinet Phishing
GET /img/icon-survey.svg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/svg+xml
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-c19"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1985
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kDMHualp3PG6JnkTtq2GsJhHCsuXfzVgR4oJ7KAK8ZZF0Y02ILaJbwo%2BqXX%2FyRXvN6H2yQ5709fzXoYej8x0yAUl6Qiwl6JGgxs%2Fkp7Kcv52U1%2F1csl%2BrENMHB%2FSsABEO%2Fpd%2BpG7oQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079df4aa3b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/config/dict/cookie-consent-1.json?v=10
200 OK 6.8 kB URL GET HTTP/3 getitallsurvey24.top/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
Analyzer Verdict Alert fortinet Phishing
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/json
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vcBRaLuTWTnx1t8e2tF6F6CJmlQL6r4Gx2qkJd8I3bQmgqrIibYXURw2dIqIeHAhylL2GdfD0AYIlhMs1sbiowyXlqIw4HILAloMjvYjUHWw6CNxYt0tX2G1WPmdiG3XLpFWdRVICw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e02c71b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-2.png
200 OK 6.4 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-2.png
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 3e6eaea87b2891590972dd11373b09a3
f038c6e6306ca708defa2b601bf9477f0cf78a3d
15aadd2e7f4f83e79f35e760da382fb8b5045d2cf506f531bdc15b7b27f699a5
GET /img/comments/person-2.png HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/png
content-length: 6428
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-191c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1981
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0OF%2BC%2FE8LW5PiziggPPBjIYxmCaka4r%2Fg5KAjHfqR4AobcUnjCRDcStAznzLfkKwymIQSaFknsN3Idu5uw8KrujX6Mh6hWd8NSErFKf3fHgSPCOZhIqns1%2BTN5mvIx%2FisbOR5cle%2FA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e23f06b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6949f52318584a4b51c719a9b84a7287
9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905
72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1536
Origin: https://getitallsurvey24.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 10 May 2023 07:30:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://getitallsurvey24.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
getitallsurvey24.top/sw/sw4842423.js?var=5086998&var_3=680065695521973214&var_4=null&ab2_ttl=5184000000
200 OK 1.3 kB URL GET HTTP/3 getitallsurvey24.top/sw/sw4842423.js?var=5086998&var_3=680065695521973214&var_4=null&ab2_ttl=5184000000
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash c21b76d8c5cc98d28e2ded4d7182cfb3
615a50d523a68a9b87e50715c88671e6b70e2868
ce15252772a764d35cbda3d5faeeb3c3e190ed7c4a1c56f75b0997666ad44322
GET /sw/sw4842423.js?var=5086998&var_3=680065695521973214&var_4=null&ab2_ttl=5184000000 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:19 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQ67semOzg1t9QTZDICrpjvnFI01%2B%2FuwyvACG92w1yQnrFcENywKRRNOR5hgxC50OMyh7KkT1OpUjXEH%2FU9fQtLsQEvQB1MFisK0Z52uj%2FcrT3SL1g3cehg7%2BtAQvYyeo%2BnUSt7kgw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e50ad9b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
200 OK 4.7 kB URL User Request GET HTTP/3 getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4929), with no line terminators
Hash 28c4fe972543bf8b1b9353b88bf20f61
4b221c1a3610d96f9a938eb64f7cf3429a7b8d65
6c1a46b01fd630c4b5a4137e74f2ed6b067145ea7df38f2f7e4183aebc68626a
GET /finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:17 GMT
content-type: text/html
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=azx99PFIdzmv7EvvijBuw9OrR6WknxSUXzWouRwGBI%2BlvjcMVXFs17ESCIMhM1vG%2F%2FT8MQ2dxJpDrViB3xGSKvoIE%2F9CSmX7KCDHYKb%2F9KhlKrydas5Yd2bAizNOk6eU0NvL95CUnA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079ddb87fb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/_global-config-sd.00b2116e.js
200 OK 1.0 kB URL GET HTTP/3 getitallsurvey24.top/js/_global-config-sd.00b2116e.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (1060), with no line terminators
Hash 3f9103d1378471cc44f7d95db834cee7
8fa460305a019f644eca55295c64582ef1d2104e
3d0195c0721c86d97845f2a11343e918c35d9f8eeb1221982084e184d5129f45
Analyzer Verdict Alert fortinet Phishing
GET /js/_global-config-sd.00b2116e.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-412"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BKuSBL6rYcDhWT0EkzT%2FfpivrpsShKOOvuBYZqPKMUeAwT4ro4Tcid6KrV6moWcUkqBoIX03gFhGTeGelUkJn7p1EY%2FuGUgFMdY3Lvk3kG6XCVKpxuM4jHADwLsXmlC30%2BO6xiItuA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9b9b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/v-immer.esm.mjs.55c239db.js
200 OK 10 kB URL GET HTTP/3 getitallsurvey24.top/js/v-immer.esm.mjs.55c239db.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (10496), with no line terminators
Hash 10a1ed2d3df4df7b6697c37ede179269
aab3ab1c3caf92f9191f3ae2728e340fcc858144
51fb55c9404afa2c18f131beb2bcad0a1ca1cfe38adea4b8e891f9e51cc16743
Analyzer Verdict Alert fortinet Phishing
GET /js/v-immer.esm.mjs.55c239db.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-2900"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1987
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q27m0%2BQMNMfbViffOtMrVT%2FznTT0wKKN9nd77fSiiVElilYqjyJ8Y4pOfMp9726SosUCWV%2FY%2FsBJ59IsJYRwkrVJ1%2Fv3J5CT5El73yXMJLiUn0FXOOPed26VTV6E%2BE6JDq1oSMkHMg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9c7b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-13.jpg
200 OK 3.2 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-13.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash a3364ed9e772ae6f696b814072001bf8
b8f34c657c31bf1e4d42b5d864b2519493d80e92
88f30b8552d0ab928d895390b337a0049405f3b1e8446631e606ba787e1205e1
GET /img/comments/person-13.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 3172
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-c64"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1979
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wHjSP1Rs93wVEMknKK0lgtGvPwbZVwX7OziiQchHJJo%2FV5uQecXfbU5FAqNsJ3OVpCGeQHnRj65V6KLDwhhxvCrum24bKNae4uLZKBFhy4j2mSRuqJuNxlYIfI8d7%2BzYQ%2FAg%2B7ZbSg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e2bfcdb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/pfe/current/micro.tag.min.js?z=4842617&sw=/sw/sw4842617.js&var=5086998&var_3=680065695521973214&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
200 OK 42 kB URL GET HTTP/3 getitallsurvey24.top/pfe/current/micro.tag.min.js?z=4842617&sw=/sw/sw4842617.js&var=5086998&var_3=680065695521973214&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3={var_3}&testinapp=4816639
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type C source, ASCII text, with very long lines (41946), with no line terminators
Hash 9c1a21a7325f334b8f1115b7c6476950
6cbe8da2596f380db8bb7a40fb42c7958f357c6e
9243782de0a2103b4cb642615ede16afdb1cafcb6aab5eba687a796e44f0a84d
GET /pfe/current/micro.tag.min.js?z=4842617&sw=/sw/sw4842617.js&var=5086998&var_3=680065695521973214&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-a3da"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=08fjUzmJcpY00sRA5f0qSaAxKJhgFY1QcxagZAtssYqThdUGhAwsBOmxT%2FyT2lO8yV2Jj%2Bn6GRCXWRrSFuhDQKyGTx6On0W%2B%2FSKWMJE7AjXwTYbVdaoSspfzkFiUjsSWFskeCrA1Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079de998cb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
offpichuan.com/rotate?zz=4292523;4326652;5128285;4949467&var=5086998&uid=70d7de80516c4861b876282ab5246b7f&var_3={var_3}
200 OK 1.8 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292523;4326652;5128285;4949467&var=5086998&uid=70d7de80516c4861b876282ab5246b7f&var_3={var_3}
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
FingerprintDF:FD:C9:DF:54:1F:F8:D0:EB:70:9D:22:14:AB:31:A4:CA:18:1D:AE
ValidityThu, 30 Mar 2023 21:17:15 GMT - Wed, 28 Jun 2023 21:17:14 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1775), with no line terminators
Hash 24d72ef2bff631179a4aaa7a56ddc76f
6a41bb3363bb7c33ec5f5315b393a4924b248346
152c089e558a93e0847e4e3506a0bdeec2db6379eaa97dfde7006989ef0f8910
GET /rotate?zz=4292523;4326652;5128285;4949467&var=5086998&uid=70d7de80516c4861b876282ab5246b7f&var_3={var_3} HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://getitallsurvey24.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
x-trace-id: 168c97e08bd2d7a7ec46f50bfa3c6760
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
vary: Origin
access-control-allow-origin: https://getitallsurvey24.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=70d7de80516c4861b876282ab5246b7f; expires=Thu, 09 May 2024 07:30:18 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
getitallsurvey24.top/js/s-storageService.js.24e15119.js
200 OK 2.6 kB URL GET HTTP/3 getitallsurvey24.top/js/s-storageService.js.24e15119.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2624), with no line terminators
Hash 92ba5c835e9273abcc9a4e5bd9ce7949
75050f148900e64655c7c225dcd016fdc9165718
1a17cd3a15460fb7839645aa0cdc52efc308f769807c4810f8ae59602b441e9a
Analyzer Verdict Alert fortinet Phishing
GET /js/s-storageService.js.24e15119.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-a0c"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2491
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TcKzwRw2QJcCcjw0Tbln2kSZ1LU9SKxPF825aP7Rxk72yxcihZbwVj027Uh7scu0RTpt8XZn3ISDKciDNeuNxFLOSYpGx1%2B9%2B4UiPakizF%2F3lYlqDa5vh4rwdDtNoiAg5D1BgSl%2Fpw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9bcb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/js/config/data/sd-111203000.js?v=10
200 OK 11 kB URL GET HTTP/3 getitallsurvey24.top/js/config/data/sd-111203000.js?v=10
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (10631), with no line terminators
Hash 09313c3754d700ba9238ba91a73df822
103722370dded145a353e50f3d7f976dcba2c4b1
9af580fcd288fa207cc70164cd8db7d642756e0763a6652d031d0185ed18adcd
Analyzer Verdict Alert fortinet Phishing
GET /js/config/data/sd-111203000.js?v=10 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-2987"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yJ1ee6alaj9EHc6yqHRD1GmHQKpYa4m47BLh8JahNrknyje%2FI%2FTAMZPjLb69XOCmG4G3WBAcx6E6%2FeXQaEzCfP6fjQb1K4NFhEZIUHMhb6bNGcE1XvSOskBlWqRwyd8dUeeRnN218Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079df5ad1b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
laugoust.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=getitallsurvey24.top&var=5086998&ymid=&var_3=680065695521973214&var_4=null&dsig=&action=prerequest
200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=getitallsurvey24.top&var=5086998&ymid=&var_3=680065695521973214&var_4=null&dsig=&action=prerequest
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint99:7C:6B:09:6A:A1:BC:70:53:D5:2F:97:56:F3:C0:A5:06:9F:80:C9
ValiditySun, 19 Mar 2023 05:11:02 GMT - Sat, 17 Jun 2023 05:11:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4842423&is_mobile=false&domain=getitallsurvey24.top&var=5086998&ymid=&var_3=680065695521973214&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 10 May 2023 07:30:18 GMT
content-length: 0
x-trace-id: 618133ad8ed71b877e4c6e445315a8d6
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
getitallsurvey24.top/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 getitallsurvey24.top/favicon.ico
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/x-icon
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 721
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EljjnvF9PTgwAkbJTEjdOUgIk6ng8bl%2FX2FlkdvyYB1aAZ0GvoVJyr4%2FNqnCPFdC5OyFU0J4jF02c6uD5HyPZ1i%2BqnnWRLBTgqMWixwsH%2BUZkx7g3KqiZD4OeaXDGb6suKOQX75qpA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e3789db524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-3.png
200 OK 7.4 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-3.png
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 2f62e53b6333bc904be22a37a1fd0ace
6e972fefcbe0193d9b28817c47c1ceab2a0235d1
9128194f1b1bf44435a3e80f994157b94a40a3365cd8f0794dcadb41a24c3b41
GET /img/comments/person-3.png HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/png
content-length: 7368
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-1cc8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2BWu5RJfNhg6XrZh%2BJgLDEHccQr2%2BTQ5GrEcHcSu1htTPgcwGTuyLo5PIvsCS4EjZoVmRNL9jgJyA4ay5uR4bqyAxgqJlKTKJ9ckHppNngYRKOqHAVbchfoKXLESp3n%2BV%2B1g2zt5gA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e24f19b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-10.jpg
200 OK 6.2 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-10.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash 044ab37551bfe632f53b8f15d991f36e
77fdc6210608e5e36e1d36ac7fd867104cb20d9e
36adcb32026c016feaff678063911fcc9e7985e9f0c56bb1daa776f98964ef91
GET /img/comments/person-10.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 6178
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-1822"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y8IS%2BfpMPxGnpvhUL%2FecMZNrKfEGHa9b6J1zp3MQM4YjI0Pm0OXbm17jn343G%2FKHaNMWKeQ3GlSOmKupkrycXNqPiyGLcSGqKpgf99UpFv4d3aoXXv0aK%2F%2B54Ju8o6t%2FQW9DfjAI1A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e25f21b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cdntechone.com/stattag.js
200 OK 18 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (17823)
Hash 5c95ffef354b8177b1fafe6602dc82d8
efa7460953cfa1684507c2eb70db4402fc04ec4d
3d45b2164e7d4b3463daed6795455b3a92c97f008b419ab071c7298d02171144
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
last-modified: Mon, 06 Mar 2023 09:49:58 GMT
etag: W/"6405b746-4829"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6970
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z8BP3BiXv0KoMWLWY5pKC0Zt%2FamH0XjYH7%2Bj8hpaqWFVASUmc4Fkcl6TYxHlXsN1MCZ71gfKKb9R5A8L0WVnF5snQgirTMlZl0aEU8bixWK%2FcA9g4teC55HLvwkgErpEIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c5079e06bd7b523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
getitallsurvey24.top/js/survey.7cf777d3.js
200 OK 5.4 kB URL GET HTTP/3 getitallsurvey24.top/js/survey.7cf777d3.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (5583), with no line terminators
Hash 6ee6c4aa9cd922efcc584501b9728c6c
84d58fd39b9dbfad73dd9f99195b35ab4f8aec70
9e3635269ca25774818daf2614ebccec09dd5de363325ebb989e12813c0cf4c8
Analyzer Verdict Alert fortinet Phishing
GET /js/survey.7cf777d3.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-153d"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1984
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IkgH0wOrD1fCc47PVFYjj27Dd8Y4EFlX%2BPcgFOyRtufpCQ4QxmtJ%2F3kzckPau1PizTxRYIqMotXI%2FNFEUVSIGafPG3y9CQ1qoSzbc2hEFD6XSAbtFPXWPUXkvA6aCoFLKySNtGvdeQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9ceb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
my.rtmark.net/gid.js
200 OK 65 B IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint74:B2:31:E9:6E:77:8E:33:B3:9D:61:F0:29:AA:AA:21:BB:5E:45:12
ValidityWed, 15 Feb 2023 21:34:45 GMT - Tue, 16 May 2023 21:34:44 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 2f370f2cdaa2025e56787fac5991af78
47b5bd444a2e672c4b851f050425e8936d9fb317
9608a585ca6adf3bc5a180d1df9b5c93c13fbddb258b3dc9fcd48f4a76dd03d2
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://getitallsurvey24.top
DNT: 1
Connection: keep-alive
Cookie: ID=70d7de80516c4861b876282ab5246b7f
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://getitallsurvey24.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=70d7de80516c4861b876282ab5246b7f; expires=Thu, 09 May 2024 07:30:18 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
getitallsurvey24.top/js/_is-browser-supported.5463af36.js
200 OK 1.0 kB URL GET HTTP/3 getitallsurvey24.top/js/_is-browser-supported.5463af36.js
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type ASCII text, with very long lines (1118), with no line terminators
Hash 9ce5594dd44f8273390bd576327c8477
d93084a6673ead5461b820c03fc5d91964461a68
d058581e440bdc44cf3c231f39b84d0fd541d8a99ef6c20c39ec506e5889d492
Analyzer Verdict Alert fortinet Phishing
GET /js/_is-browser-supported.5463af36.js HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6454ed7a-403"
last-modified: Fri, 05 May 2023 11:50:18 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2492
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UnsWWDRWBR0qPHoDW61E2EZQqKipvu7qlI2Q%2FpY2GqyIP7wXTjEbCt4EGQSac6BE5M%2FxXYdZYpJuFOOgB7A%2BrW90mV8v5LClNpeLxdlRTkJZutlqYlZ3cf%2BGGyE3MF5Ynm4cc1sG8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079deb9b8b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-14.jpg
200 OK 5.4 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-14.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 6012ff0d59aa6a34aaca1ea8f2fa88fc
ef59662c9b666106486039e9f1deb40fb4a8ff77
2c020310e91430067c7128425f14ac0ff1710aea5e67c144a8fceac46311182d
GET /img/comments/person-14.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 5392
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-1510"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1981
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oeXnEO2IwsbV8ps%2FLIojq6KxmxVA4A2el7Ulm9IxIjk4LaTcvdkdznu3%2FZ6LbtfS2ZmokIxZgNeK3OAIwXOjnj8rrWBSf%2FUZbv1Pfgrf%2BDlr2eWfGmgO2g8j%2BBTzmWDAnhP%2B99mGsg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e23f04b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-6.jpg
200 OK 4.4 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-6.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash be9ff88491a5bc0745579a3813eb2cbe
870f88a7fae9fdd928af33f47c5ffdddc6a4082b
698d413ddf6b2ec37acf0e982237d239bd912cb097e243cb355855ac2b8548d3
GET /img/comments/person-6.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 4392
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-1128"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vhuPJp2T8G485Epf7l1FysC9VDsUEFMEJ89n8osJjdUrFRA9idQL1fryFMRIuGyVgQj%2FlnGX9t3x4uDOy0K32xYNsd0%2FQ1q0ZZp6qBfqM6qzheamU9jtuS%2FIsq3oYOpdWbMYy5TMUA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e24f0eb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/img/comments/person-14.jpg
0 B URL GET getitallsurvey24.top/img/comments/person-14.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/comments/person-14.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
getitallsurvey24.top/img/comments/person-5.jpg
200 OK 4.3 kB URL GET HTTP/3 getitallsurvey24.top/img/comments/person-5.jpg
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 21fd6ef6d69b527c02e92a8c23d28d52
5980b75edc23f7fa2f57fa257cb67c9efb86fa58
f37490dbef620959d7124e3de027c5b5c43a57dc90737163947a6725444051eb
GET /img/comments/person-5.jpg HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: image/jpeg
content-length: 4333
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: "6454ed7a-10ed"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1980
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MsIjPthGbeSPKig4ClXDmoBjaPdGmhhJdI79atturMmZXPT%2BnFU2JwQkGicJLHIVS5wZeCmV64I4LILnCG2BjUPizmaEPUip4g2h8Kth8sdJAPgr9DDt6zobXSkupfAl%2F1eu5sZAng%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e24f0bb524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
getitallsurvey24.top/pfe/current/micro.tag.min.js?z=4842423&sw=/sw/sw4842423.js&var=5086998&var_3=680065695521973214&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
200 OK 42 kB URL GET HTTP/3 getitallsurvey24.top/pfe/current/micro.tag.min.js?z=4842423&sw=/sw/sw4842423.js&var=5086998&var_3=680065695521973214&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP
Requested by https://getitallsurvey24.top/finance-survey.html?offer_id=112025&z=5086998&s=680065695521973214&b=13412327&campaignid=14083&var=&ymid=680065695521973214&var_3=%7Bvar_3%7D&testinapp=4816639&utm_medium=5086998&utm_source=zd_14083&utm_term=13412327&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.getitallsurvey24.top
Fingerprint18:07:D3:03:DB:CB:70:C6:88:34:47:08:5D:25:83:EC:DF:14:2D:BD
ValidityMon, 10 Apr 2023 20:41:56 GMT - Sun, 09 Jul 2023 20:41:55 GMT
File type C source, ASCII text, with very long lines (41946), with no line terminators
Hash 9c1a21a7325f334b8f1115b7c6476950
6cbe8da2596f380db8bb7a40fb42c7958f357c6e
9243782de0a2103b4cb642615ede16afdb1cafcb6aab5eba687a796e44f0a84d
GET /pfe/current/micro.tag.min.js?z=4842423&sw=/sw/sw4842423.js&var=5086998&var_3=680065695521973214&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: getitallsurvey24.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 10 May 2023 07:30:18 GMT
content-type: application/javascript
last-modified: Fri, 05 May 2023 11:50:18 GMT
vary: Accept-Encoding
etag: W/"6454ed7a-a3da"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=siPzqho6svcBCMffCkje%2FRV0aX8aTqg0F%2FEjOKtoQdslIbyDjN%2F305Kl92MhjsY50DJ%2BJBLeI%2BI1hKVeTp06XwW7y5NwHvI8t3mVW1nDo6MubfXDAQvCaJz66T%2BxemPTmt8hjt85LQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5079e03c7db524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
139.45.197.238
172.67.197.103
104.18.32.68