viapawniarda.com/4/5305849/
139.45.197.238200 OK 828 B URL HTTP/1.1 viapawniarda.com/4/5305849/
IP 139.45.197.238:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (463)
Hash 8d29ddd746e91695d0fad3fcae287a5f
d155926e6770db1e5ee3ccf5b89c5d81e314c091
b06c946b015a8f82628e089f3b7b453b5eeece81c6a249ec197601c073332d16
Analyzer Verdict Alert quad9 Sinkholed
GET /4/5305849/ HTTP/1.1
Host: viapawniarda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 12 Dec 2022 16:17:31 GMT
Content-Type: text/html; charset=utf8
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: a674cc13d898e4c668dfd37601cfa70f
Link: <https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://sweepstakessurveytoday.com>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
Access-Control-Allow-Credentials: true
Access-Control-Max-Age: 86400
Timing-Allow-Origin: *
Set-Cookie: OAID=a9ad8c2ce1184f87a2b1947414abd344; expires=Tue, 12 Dec 2023 16:17:31 GMT; path=/
oaidts=1670861851; expires=Tue, 12 Dec 2023 16:17:31 GMT; path=/
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
Pragma: no-cache, no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
Access-Control-Allow-Origin: *, *
Access-Control-Allow-Methods: GET, POST, OPTIONS, POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, Accept, Content-Type, Content-Length, Accept-Encoding
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 43ad67f241ee3692a9c9c1da080dae58
6a024f7d71eeee257edc91ba9273416f634aaae5
636635b57f9e6d2ad9b1b949298ee7d3b5b7e251a63516ff68bfb1eceded5688
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9800
Expires: Mon, 12 Dec 2022 19:00:51 GMT
Date: Mon, 12 Dec 2022 16:17:31 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 430f1651125c14bfa4924aa1f1a392e9
304141c5fe7ac8b370a67912b2592f9622de9600
315d77a9956f34b1615e38f5f1971dd05146980f8a36b35a8108d47ebba7e8e5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "315D77A9956F34B1615E38F5F1971DD05146980F8A36B35A8108D47EBBA7E8E5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16071
Expires: Mon, 12 Dec 2022 20:45:22 GMT
Date: Mon, 12 Dec 2022 16:17:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 12 Dec 2022 15:33:43 GMT
content-type: application/json
age: 2628
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash dbd022fec0a71226daaf29b7563a8896
c37d14dc7b3849a4bb815fa325fb5e70fae54039
22da5e6e3f9507688fc8cb02183d52cf38f4adf8b2c6c52eaf5f88182471efeb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22DA5E6E3F9507688FC8CB02183D52CF38F4ADF8B2C6C52EAF5F88182471EFEB"
Last-Modified: Sun, 11 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7474
Expires: Mon, 12 Dec 2022 18:22:05 GMT
Date: Mon, 12 Dec 2022 16:17:31 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MfqVowtpMsjGjUd/syzoRnB6JpjMq3D7sUb1oobzrmAnrXQORsgTixJ4Mt/q3MTY7P1AB8U1Kxo=
x-amz-request-id: 0F3Z626KGYJ3PKRJ
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 12 Dec 2022 15:49:39 GMT
age: 1672
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 16:17:31 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 417cf1a73f4cbb9e80daf56f9dd3e50d
22fff3ba1d3ae105be5e69624d589981ba5041f5
342190aea99b9d5d77b76d2d623ae45562d9ff17984924c2ee57ed1f95bb9f4c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "342190AEA99B9D5D77B76D2D623AE45562D9FF17984924C2EE57ED1F95BB9F4C"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5308
Expires: Mon, 12 Dec 2022 17:45:59 GMT
Date: Mon, 12 Dec 2022 16:17:31 GMT
Connection: keep-alive
my.rtmark.net/img.gif?f=merge&userId=a9ad8c2ce1184f87a2b1947414abd344
139.45.195.8200 OK 43 B URL HTTP/2 my.rtmark.net/img.gif?f=merge&userId=a9ad8c2ce1184f87a2b1947414abd344
IP 139.45.195.8:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=merge&userId=a9ad8c2ce1184f87a2b1947414abd344 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 16:17:31 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=a9ad8c2ce1184f87a2b1947414abd344; expires=Tue, 12 Dec 2023 16:17:31 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 4.4 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9d5196c94caafa449ea8fc028f8e9a4c
d776b060fa001ea7e1637c77cc2f6c12c68ce5d2
8eca8ff24e233a406ac265ece44f8e6a0b78c58db83b578d5e69b0e96f755c05
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "342190AEA99B9D5D77B76D2D623AE45562D9FF17984924C2EE57ED1F95BB9F4C"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5307
Expires: Mon, 12 Dec 2022 17:45:59 GMT
Date: Mon, 12 Dec 2022 16:17:32 GMT
Connection: keep-alive
my.rtmark.net/gid.js
139.45.195.8200 OK 4.2 kB IP 139.45.195.8:0
Hash b382b62014aaa1daeb7291e0a9648e2c
137321f2cba2be3b64ab8bf70f48c218d55855c2
c07568a3aaad37e9858aec973317afa5f61fea4c9e5e8f5d60c13ce8dd628b40
GET /gid.js HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 16:17:32 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=6a356d3d28e147d5b44b6b9ef537a071; expires=Tue, 12 Dec 2023 16:17:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.36.77.32200 OK 3.8 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 9d480c919cf8d2d1c9cfad97de02527e
1614014633be23163d13e6cfec81a46c89d10c74
cba0715a3a0036827173382a8823034a8692f95724f4ce1725f3320156ee2c47
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B0752251CD001FBC22D3693295C253DBC276BD2A5CA0B3BAE51ED48A69F88D49"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9084
Expires: Mon, 12 Dec 2022 18:48:56 GMT
Date: Mon, 12 Dec 2022 16:17:32 GMT
Connection: keep-alive
e1.o.lencr.org/
23.36.77.32200 OK 21 kB IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5797fca6810b28bf3b9944c7ae2271d9
ce27e242620b29391fc1ba6415675b678b250a81
5a521492ad6124d3f2fac54eb01e405a366fea3395c819bd9932256e8c80cde3
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "B0752251CD001FBC22D3693295C253DBC276BD2A5CA0B3BAE51ED48A69F88D49"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9084
Expires: Mon, 12 Dec 2022 18:48:56 GMT
Date: Mon, 12 Dec 2022 16:17:32 GMT
Connection: keep-alive
ocsp.globalsign.com/gseccovsslca2018
104.18.21.226200 OK 937 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP 104.18.21.226:0
Hash 4804302ac584abba68b5903ddf6339f8
eb184f3b31f60c625f56496470d3541292cab589
966caabdf1b5f96d5a1fd3fc6d1f5f7d4b6de367c89e522908bc0800b91277d8
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 16:17:32 GMT
Content-Type: application/ocsp-response
Content-Length: 937
Connection: keep-alive
Expires: Fri, 16 Dec 2022 12:19:19 GMT
ETag: "eb184f3b31f60c625f56496470d3541292cab589"
Last-Modified: Mon, 12 Dec 2022 12:19:20 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2136
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7787c55179000b45-OSL
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d924af266bf91a776cf978b3840332ed
d70a5d9f216052da348b0ddc27db7898b418ccbd
5c892308776d44e9dfce90d668e9932ceca8b747b92f78ccb9fac44c84711eb5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5C892308776D44E9DFCE90D668E9932CECA8B747B92F78CCB9FAC44C84711EB5"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11408
Expires: Mon, 12 Dec 2022 19:27:40 GMT
Date: Mon, 12 Dec 2022 16:17:32 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 12 Dec 2022 15:33:17 GMT
age: 2655
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
77.88.21.119200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP 77.88.21.119:0
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash 7ad4a6dfa3a63711b29274bebde074b9
ce9c3a7a865a19180978291e533554ccb34cf081
1e4cc2c09ad8810e326ce09fc66b5e8ebc10775de45b5fba330c55dc01d76da9
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73733
date: Mon, 12 Dec 2022 16:17:32 GMT
access-control-allow-origin: *
etag: "63933377-12005"
expires: Mon, 12 Dec 2022 17:17:32 GMT
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-encoding: br
content-type: application/javascript
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 4.9 kB IP 93.184.220.29:0
Hash 01e13aeedc91c57e3ee66d809539ff7d
7a85ae43e59c216d6ad9fd6ccc3b73e46fa44633
894f98135189ee86f76197ac894767dd4b3ddca58dcb61426f9ced8c3464cfcc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3898
Cache-Control: max-age=150857
Content-Type: application/ocsp-response
Date: Mon, 12 Dec 2022 16:17:32 GMT
Etag: "6396ef2b-1d7"
Expires: Wed, 14 Dec 2022 10:11:49 GMT
Last-Modified: Mon, 12 Dec 2022 09:06:51 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash 849e7d14c79720f2ab4168c416effd9c
764bcd5ba64a4fd23bfef15e4401bb741e0e515f
a219f07e6ab39a84155b8956d651925de6ec8328acedb5e636c94bff6f6efc85
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 12 Dec 2022 16:17:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 09 Dec 2022 13:33:26 GMT
Expires: Fri, 16 Dec 2022 13:33:25 GMT
Etag: "764bcd5ba64a4fd23bfef15e4401bb741e0e515f"
Cache-Control: max-age=335152,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7787c5526b39b52d-OSL
cdntechone.com/stattag.js
188.114.96.1200 OK 5.9 kB URL HTTP/2 cdntechone.com/stattag.js
IP 188.114.96.1:0
File type ASCII text, with very long lines (12932), with no line terminators
Hash 5da82e24d99f64a965e9f9b074a5957f
6a6509495c73a7fc9d6383c6dd3f25188bf6d4ea
b9ee5a1914370fbb670f3c4af5ae6aeafaab050e8f610fa44ebdef3df971b0e5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 16:17:32 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:35 GMT
etag: W/"637e3737-3284"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6732
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BOFKGWgmp5liM10RzSQmU9O2uO9P5D7cl9XjeiV4vIhiDnLTe1vzhjfgu5m8OgB2DvxBmFELyGW1n%2F4w5T3KcsBfNNvYS%2BpyOy5S2Bsbf%2ByAkILv4R9xTqxKNFdfvd7JQQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7787c5507f3cb51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/advert.gif
77.88.21.119200 OK 380 B URL HTTP/2 mc.yandex.ru/metrika/advert.gif
IP 77.88.21.119:0
Hash 2fdb1ab22a2153cd3dba9075205b0266
eaaf1adc4dcfc04a1d162f7dc6daddc370684c32
eb3dff8a5c7ac14e8bb848fe7dd145c893cfd113aa11abdc844946be269395b2
GET /metrika/advert.gif HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:32 GMT
access-control-allow-origin: *
etag: "63933377-2b"
expires: Mon, 12 Dec 2022 17:17:32 GMT
accept-ranges: bytes
last-modified: Fri, 09 Dec 2022 16:09:11 GMT
cache-control: max-age=3600
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A478%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161730%3Aet%3A1670861851%3Ac%3A1%3Arn%3A978599301%3Arqn%3A1%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C24%2C51%2C0%2C1%2C0%2C%2C274%2C8%2C%2C%2C%2C558%3Aco%3A0%3Ans%3A1670861849644%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
77.88.21.119200 OK 400 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A478%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161730%3Aet%3A1670861851%3Ac%3A1%3Arn%3A978599301%3Arqn%3A1%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C24%2C51%2C0%2C1%2C0%2C%2C274%2C8%2C%2C%2C%2C558%3Aco%3A0%3Ans%3A1670861849644%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP 77.88.21.119:0
File type JSON data\012- , ASCII text, with very long lines (400), with no line terminators
Hash 88dfa150e1a4481047581afa3cced043
6f47508efc333ab190195a2e326507c05dfce998
efdba08fd410a6846088e744f7cac0a197bf93bb5b46f7f3baade720464f3748
GET /watch/66423859/1?wmode=7&page-url=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&site-info=%7B%7D&browser-info=pv%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afp%3A478%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161730%3Aet%3A1670861851%3Ac%3A1%3Arn%3A978599301%3Arqn%3A1%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C24%2C51%2C0%2C1%2C0%2C%2C274%2C8%2C%2C%2C%2C558%3Aco%3A0%3Ans%3A1670861849644%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 400
date: Mon, 12 Dec 2022 16:17:32 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:32 GMT
last-modified: Mon, 12-Dec-2022 16:17:32 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
push.services.mozilla.com/
54.149.203.40101 Switching Protocols 53 kB URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.203.40:0
Hash 740fa9a861da5045b1e95e909cb1f9fa
cc7e9da5ef83a537402a21fddc5359fddd45c8cd
a4af55314c8c9e5f7071da264a7fb57ac91d9726474e23fbad1b8af3701d71ee
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 2miO59sKuWQy2SbS3DsD+w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wTVJ+aLXGoMS4zhmMlMWG5QYycQ=
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonUnique&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A297952810%3Arqn%3A4%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonUnique&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A297952810%3Arqn%3A4%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonUnique&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A297952810%3Arqn%3A4%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(4)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22isUnique%22%3Atrue%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexCall&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A508321132%3Arqn%3A3%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexCall&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A508321132%3Arqn%3A3%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexCall&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A508321132%3Arqn%3A3%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(3)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonSurveyStart&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A224947724%3Arqn%3A2%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1288%2C1288%2C0%2C%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%22112755%22%2C%22userSurveyId%22%3A2755601%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonSurveyStart&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A224947724%3Arqn%3A2%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1288%2C1288%2C0%2C%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%22112755%22%2C%22userSurveyId%22%3A2755601%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonSurveyStart&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A224947724%3Arqn%3A2%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C1288%2C1288%2C0%2C%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(2)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22userOfferId%22%3A%22112755%22%2C%22userSurveyId%22%3A2755601%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexLoad&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A502462732%3Arqn%3A6%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexLoad&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A502462732%3Arqn%3A6%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonAdexLoad&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A502462732%3Arqn%3A6%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(6)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonStepChange&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A313233624%3Arqn%3A5%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonStepChange&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A313233624%3Arqn%3A5%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonStepChange&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A313233624%3Arqn%3A5%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(5)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22stepName%22%3A%22main%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A434418844%3Arqn%3A8%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A434418844%3Arqn%3A8%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonTrafficQualityCheck&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A434418844%3Arqn%3A8%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(8)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22trafficQuality%22%3A%22alert%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A261381175%3Arqn%3A7%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A261381175%3Arqn%3A7%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonNotificationPermission&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A261381175%3Arqn%3A7%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(7)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22notificationPermission%22%3A%7B%7D%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A785822734%3Arqn%3A9%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22onclick%22%2C%22teenageExitDirection%22%3A%22onclick%22%2C%22mainExitPopunderDirection%22%3A%22ipp%22%2C%22teenageExitPopunderDirection%22%3A%22ipp%22%2C%22notUniqueExitDirection%22%3A%22ipp%22%2C%22autoExitStepDirection%22%3A%22ipp%22%2C%22autoExitPopunderStepDirection%22%3A%22ipp%22%2C%22inappDirection%22%3A%22ipp%22%7D
77.88.21.119200 OK 43 B URL HTTP/2 mc.yandex.ru/watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A785822734%3Arqn%3A9%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22onclick%22%2C%22teenageExitDirection%22%3A%22onclick%22%2C%22mainExitPopunderDirection%22%3A%22ipp%22%2C%22teenageExitPopunderDirection%22%3A%22ipp%22%2C%22notUniqueExitDirection%22%3A%22ipp%22%2C%22autoExitStepDirection%22%3A%22ipp%22%2C%22autoExitPopunderStepDirection%22%3A%22ipp%22%2C%22inappDirection%22%3A%22ipp%22%7D
IP 77.88.21.119:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /watch/66423859/1?page-url=goal%3A%2F%2Fsweepstakessurveytoday.com%2FonGetIppRotate&page-ref=https%3A%2F%2Fsweepstakessurveytoday.com%2Fsweeps-survey.html%3Foffer_id%3D112755%26geo%3DNO%26oaid%3Da9ad8c2ce1184f87a2b1947414abd344%26s%3D626202592120414444%26z%3D5305849%26b%3D14374854%26var%3D%26campaignid%3D5958240%26utm_campaign%3D%26utm_medium%3D5305849%26utm_source%3Dzd_5958240%26utm_term%3D14374854%26utm_content%3Dzd_public_v2%26country%3DNO%26testinapp%3D4333347%26testinapp%3D4834358%26rdk%3Drk1&charset=utf-8&hittoken=1670861852_5be054e096c68f62488e9bf1d8448ebbd2835f84a5466969664afcb276013cf0&browser-info=ar%3A1%3Avf%3Awy2bjvswh02szcd631p0n%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A943%3Acn%3A1%3Adp%3A0%3Als%3A1228189778454%3Ahid%3A241159007%3Az%3A0%3Ai%3A20221212161731%3Aet%3A1670861851%3Ac%3A1%3Arn%3A785822734%3Arqn%3A9%3Au%3A16708618511034330174%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Aco%3A0%3Ans%3A1670861849644%3Aadb%3A2%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1670861851%3At%3ADear%20user&t=gdpr(14)mc(g-8)clc(0-0-0)rqnt(9)aw(1)fip(1)ti(0)&force-urlencoded=1&site-info=%7B%22getIppLinkTime%22%3A0%2C%22mainExitDirection%22%3A%22onclick%22%2C%22teenageExitDirection%22%3A%22onclick%22%2C%22mainExitPopunderDirection%22%3A%22ipp%22%2C%22teenageExitPopunderDirection%22%3A%22ipp%22%2C%22notUniqueExitDirection%22%3A%22ipp%22%2C%22autoExitStepDirection%22%3A%22ipp%22%2C%22autoExitPopunderStepDirection%22%3A%22ipp%22%2C%22inappDirection%22%3A%22ipp%22%7D HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Mon, 12 Dec 2022 16:17:33 GMT
access-control-allow-origin: null
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Mon, 12-Dec-2022 16:17:33 GMT
last-modified: Mon, 12-Dec-2022 16:17:33 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7317
Expires: Mon, 12 Dec 2022 18:19:31 GMT
Date: Mon, 12 Dec 2022 16:17:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7317
Expires: Mon, 12 Dec 2022 18:19:31 GMT
Date: Mon, 12 Dec 2022 16:17:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7317
Expires: Mon, 12 Dec 2022 18:19:31 GMT
Date: Mon, 12 Dec 2022 16:17:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7317
Expires: Mon, 12 Dec 2022 18:19:31 GMT
Date: Mon, 12 Dec 2022 16:17:34 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash d35fcd5d7e74c530535b18d57ed5f587
3b9bf9e02593b63108515f4df7cae57ce62145e7
4bdb744a2d9ac6d051f5192dbf3e00ba1b18208930655e6752fd6ccd118faff0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7317
Expires: Mon, 12 Dec 2022 18:19:31 GMT
Date: Mon, 12 Dec 2022 16:17:34 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
34.120.237.76200 OK 4.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 38876d760ef06c8471468c474c1e28a7
d43cd03d5eb3e7618b6fb70c935010c2ac92ad32
a0747f29eb6084eef42d3c247594973b02c619c7ec56b6137e24b6d0362557a0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5a765cd8-d4ff-441c-a948-f6a223fa2b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4720
x-amzn-requestid: dd990fe1-8447-403e-b276-40889af5baa0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENuF6SoAMF7oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d8a-59b5a8f92ef6111e64e16079;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SBYH2ZqOyZx6tB8u3g3dkimaCUGSWAMQhULpYs4gWrmZ6i3_1Br_zQ==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:57:39 GMT
etag: "d43cd03d5eb3e7618b6fb70c935010c2ac92ad32"
content-type: image/jpeg
age: 65995
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d5e5918cf53c569d6674e598228246
241a28d882355e06b0a2428c931f9d72dd5c6c53
2ebf30d1844d23a2b7516b900b1aa4473e5c042b0e0ecb2c39675d4b4bc7910e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc582b370-f952-4f63-9937-1de61f295c46.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5452
x-amzn-requestid: eb6aca44-e834-4123-b191-eb3f007bf7b8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c6OCrGM-IAMFnxQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393f6dd-71fee2de2dd69c7d1d4d32fe;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 03:02:53 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2dzTL44JHLjIbSIFDFPwmOcNMq9-lZF4YvsBimPz3YD1c4xQF2tUCA==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 03:38:01 GMT
age: 45573
etag: "241a28d882355e06b0a2428c931f9d72dd5c6c53"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b1a13d12c326848d5b7adeb2562a35a5
d795c519ea637a213aab1d80daaf44ce5ad19069
f7b99c93b99268e1b2fa438d493cf23cd75a98833710ddd22b5278a76e9f019a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7919
x-amzn-requestid: c090b5fd-ff70-48a1-9c6b-256a0776cbfd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c59nPEILoAMFr_A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393dc94-691a58a54b9f102b23b65c31;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 01:10:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: s0Y6w4Eg1E_e-r2tJpWQ74dxqUnP_e7ElJ2RdbSXanovRT9W8yfUSg==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Dec 2022 01:24:09 GMT
age: 53605
etag: "d795c519ea637a213aab1d80daaf44ce5ad19069"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75dd1ecae61b991cd21929deb9244aac
4f14c9f7b36dfa356877251f1e6a0f5936286c4b
3435eda8961bb9954fcf5fd7c957ce58fd7aa4bb9e00525b8f42756adcf341e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcded97a1-bc2d-405f-b231-35f5af035463.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6438
x-amzn-requestid: 517b1627-9789-48e8-b5df-106fee878820
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAENaGN6IAMFoUw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d88-28cbd126745e8ab15d937936;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: amWbF9zOStURk7mvKoCOs0babDMecP7hOWzf4Hrn8RGThFiqv-_elg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:59:55 GMT
age: 65859
etag: "4f14c9f7b36dfa356877251f1e6a0f5936286c4b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
34.120.237.76200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2020df3404a4b7c3e142af4a1330b848
2fe69b52fe03128e86550bf08474ecac82682384
37a52c158d5cfdf3589e19163cf446c02ce1466f444656080b02da82d2bcefae
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb6bca12a-103c-4b98-a218-27a61f8d6951.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6311
x-amzn-requestid: 46ccaee0-bde8-4be6-9dc8-46e3ae356dc8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c8xUYH10oAMF8Ig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6394fc1b-2440251f06cb950a57489555;Sampled=0
x-amzn-remapped-date: Sat, 10 Dec 2022 21:37:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bgmOsF49y9d_oDWjQxm7toxsydgt9HBKZunUbe-BZfSmdfJ7q0Jo3A==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:52:33 GMT
age: 66301
etag: "2fe69b52fe03128e86550bf08474ecac82682384"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9f8d3e3c9e5d2ed74c3894b4825fcc2f
6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da
9e44f93e65206ae7095cf9177296f4f528f1c2597cffa4853b7d6dcabf032796
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc57568b-de5b-4cc8-9e29-a57a302df9b6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5619
x-amzn-requestid: df7189d2-5cad-43a2-9511-20c5de53f710
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dAEMPFCSIAMF4uA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63964d81-729683c606fd6abc5bc70534;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 21:37:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: kbfjvh64NjCUE-e-3z7W58vyJMisRwERUV_W99jn3vrErY4bF1SFsg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google
date: Sun, 11 Dec 2022 21:58:39 GMT
etag: "6bbd19dbf5112b5c52a1ccbfff3c9d7d0ab030da"
content-type: image/jpeg
age: 65935
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
sweepstakessurveytoday.com/sweeps-survey.html?offer_id=112755&geo=NO&oaid=a9ad8c2ce1184f87a2b1947414abd344&s=626202592120414444&z=5305849&b=14374854&var=&campaignid=5958240&utm_campaign=&utm_medium=5305849&utm_source=zd_5958240&utm_term=14374854&utm_content=zd_public_v2&country=NO&testinapp=4333347&testinapp=4834358&rdk=rk1
188.114.97.1200 OK 0 B URL HTTP/2 sweepstakessurveytoday.com/sweeps-survey.html?offer_id=112755&geo=NO&oaid=a9ad8c2ce1184f87a2b1947414abd344&s=626202592120414444&z=5305849&b=14374854&var=&campaignid=5958240&utm_campaign=&utm_medium=5305849&utm_source=zd_5958240&utm_term=14374854&utm_content=zd_public_v2&country=NO&testinapp=4333347&testinapp=4834358&rdk=rk1
IP 188.114.97.1:0
Analyzer Verdict Alert quad9 Sinkholed
GET /sweeps-survey.html?offer_id=112755&geo=NO&oaid=a9ad8c2ce1184f87a2b1947414abd344&s=626202592120414444&z=5305849&b=14374854&var=&campaignid=5958240&utm_campaign=&utm_medium=5305849&utm_source=zd_5958240&utm_term=14374854&utm_content=zd_public_v2&country=NO&testinapp=4333347&testinapp=4834358&rdk=rk1 HTTP/1.1
Host: sweepstakessurveytoday.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 12 Dec 2022 16:17:31 GMT
content-type: text/html
last-modified: Mon, 12 Dec 2022 09:45:32 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ybyxn8qnaStzNkXcmNWW3MDLLz6KdGb3bd6tEr3BVPs%2FY3WKjSXCMNIUVhq2qytJV4Ndfh7zaE1SzqdZI75n6u%2Fs4CItaTZvEFXGGI1IQnaOCMwB8OqvBNNQmJ%2FMt5cXjxR%2BLDqcsxbSYbxl6A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7787c54c9a05b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
itcleffaom.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=5305849&uid=6a356d3d28e147d5b44b6b9ef537a071
139.45.197.237200 OK 0 B URL HTTP/2 itcleffaom.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=5305849&uid=6a356d3d28e147d5b44b6b9ef537a071
IP 139.45.197.237:0
Analyzer Verdict Alert quad9 Sinkholed
GET /rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=5305849&uid=6a356d3d28e147d5b44b6b9ef537a071 HTTP/1.1
Host: itcleffaom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sweepstakessurveytoday.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 12 Dec 2022 16:17:32 GMT
content-type: application/javascript
x-trace-id: 1ecb032880478f12096d11037d9a1e3e
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://sweepstakessurveytoday.com
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=6a356d3d28e147d5b44b6b9ef537a071; expires=Tue, 12 Dec 2023 16:17:32 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2