winbizs.xyz/ip13/id/survey_2az/img/default@0.75x.png
172.67.166.91200 OK 56 kB URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/default@0.75x.png
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced\012- data
Hash 8c107e1b5b8b9e124cc614ac3b1b7ce8
a4471830185258b840b8ba56297298ff4c121a5a
d113eb582f92abc89bcb5f15e3bdfa6165e2c3189ab8e6174cb63356a1ded746
GET /ip13/id/survey_2az/img/default@0.75x.png HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: image/png
content-length: 55706
last-modified: Wed, 14 Sep 2022 00:30:21 GMT
etag: "6321209d-d99a"
expires: Wed, 28 Jun 2023 07:32:52 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WRMS2dDWjsGb%2F4hZPOfT%2Fg%2BOiroaI%2FZL31QD3QhX4EpXRgjl70eGmkM0N8HXCAmvxQ6nfaJ%2BbVRLrP87T3sDm28ufoJ66tblAcfIzHMXEQ%2FIVsSvkLpd3C9Ggmag3w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d09949fba4fb4fd-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ-6H6Mk.woff2
142.250.74.35200 OK 31 kB URL GET HTTP/2 fonts.gstatic.com/s/pacifico/v22/FwZY7-Qmy14u9lezJ-6H6Mk.woff2
IP 142.250.74.35:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type Web Open Font Format (Version 2), TrueType, length 30908, version 1.0\012- data
Hash 0637d53459cdc8ee092a8f96186b4097
060034f995d649902b3207d41fde9a6060241499
50488656aeea003d0042da0979cd15675c0bc1c028a21dddfafd7656d54c709e
GET /s/pacifico/v22/FwZY7-Qmy14u9lezJ-6H6Mk.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30908
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 May 2023 20:08:54 GMT
expires: Wed, 29 May 2024 20:08:54 GMT
cache-control: public, max-age=31536000
age: 167446
last-modified: Mon, 09 May 2022 18:34:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
oogneenu.net/zone?pub=0&zone_id=3654242&is_mobile=false&domain=winbizs.xyz&var=&ymid=wsglf2tplan50q4p2lpl2q6u&var_3=
139.45.197.251200 OK 936 B URL GET HTTP/2 oogneenu.net/zone?pub=0&zone_id=3654242&is_mobile=false&domain=winbizs.xyz&var=&ymid=wsglf2tplan50q4p2lpl2q6u&var_3=
IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
File type JSON data\012- , ASCII text, with very long lines (935)
Hash 1a9cebb48cf5897451fd939fd90a3191
8ba7a46ba45270ed7e3dea04331e8173af297661
6b4fd842350d2aeb33e5103239319b8266050634d1b6f36f5fd47e01bde2b451
GET /zone?pub=0&zone_id=3654242&is_mobile=false&domain=winbizs.xyz&var=&ymid=wsglf2tplan50q4p2lpl2q6u&var_3= HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://winbizs.xyz/
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/json; charset=utf-8
content-length: 936
x-trace-id: 37e3c8c77f6828e96bfd688edff45e50
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
oogneenu.net/custom
139.45.197.251200 OK 0 B IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://winbizs.xyz/
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
oogneenu.net/custom
139.45.197.251200 OK 0 B IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://winbizs.xyz/
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
oogneenu.net/custom
139.45.197.251200 OK 0 B IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://winbizs.xyz/
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
oogneenu.net/custom
139.45.197.251200 OK 39 B IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://winbizs.xyz/
Content-Type: application/json
Content-Length: 902
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: f9e86675bfc84992770d5a2954426f22
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
oogneenu.net/custom
139.45.197.251200 OK 39 B IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://winbizs.xyz/
Content-Type: application/json
Content-Length: 1266
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 4abc9782782f35cba6c12bafe63593ae
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
oogneenu.net/custom
139.45.197.251200 OK 39 B IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://winbizs.xyz/
Content-Type: application/json
Content-Length: 911
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 3ca031640e0549434628a2a0e037a57b
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
winbizs.xyz/favicon.png
172.67.166.91200 OK 8.4 kB IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced\012- data
Hash 7ddbb03517ac4dfbd9bc496be78a86b7
69ba106e9d837290b62e6610625922bdb947a846
ace2acf55d735c4c701ef0a7be3fa08c783807ca0f34623a2f18337f21a89f3d
GET /favicon.png HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: image/png
content-length: 8391
last-modified: Wed, 14 Sep 2022 00:32:23 GMT
etag: "63212117-20c7"
expires: Wed, 28 Jun 2023 07:32:53 GMT
cache-control: max-age=2592000
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tXDoOPpFVteodtEmkjfeJ0wHQzFB3TV1DcMtohI0gDsVmbhJEhsoQo1RtCqs7PdyQti8o7OYaNsvNobaRw%2Fu3%2BFbz%2FVFFITxMLnNcoZEiurnrkBzwoW2T%2BeuMO4w3Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0994a68c91b4fd-OSL
alt-svc: h3=":443"; ma=86400
amunfezanttor.com/event
139.45.197.250200 OK 0 B IP 139.45.197.250:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://winbizs.xyz/
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token
access-control-max-age: 86400
X-Firefox-Spdy: h2
amunfezanttor.com/event
139.45.197.250200 OK 94 B IP 139.45.197.250:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint06:75:EF:D1:99:AE:A5:FA:8B:93:D3:D4:ED:BD:88:51:DA:2A:62:B3
ValidityFri, 31 Mar 2023 10:01:30 GMT - Thu, 29 Jun 2023 10:01:29 GMT
File type JSON data\012- , ASCII text
Hash 6d7260d831b585270923ae524206197b
e5b18eed64311ca05b59f1a75baa0adb8ce607e1
cd3cb71432698a76fc971390e6cda29d181fb4f3bf209dce1589826c8bebb73e
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://winbizs.xyz/
Content-Type: application/json
Content-Length: 986
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/json; charset=utf-8
content-length: 94
x-trace-id: 03672ae1bcd20b425e0c4d9e91ef4931
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
winbizs.xyz/ip13/id/survey_2az/img/app.js
172.67.166.91200 OK 1.5 kB URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/app.js
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type ASCII text, with very long lines (1502), with no line terminators
Hash c4bc1f3d2b0ea19147bd41706a9871f3
f6e329589d92a341641efb7186d408bdbbaf4bbc
54b7b93d58a0473f0aa817acae32149cf1acc62c372219fd673f95c575a0928b
GET /ip13/id/survey_2az/img/app.js HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 00:30:21 GMT
vary: Accept-Encoding
etag: W/"6321209d-5bc"
expires: Thu, 01 Jun 2023 19:37:44 GMT
cache-control: max-age=43200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ptGjdEEh5F9AhbPwsNt6EBa8vM2i9k1DKRaTiKTqGU7X235SyABeZZE6zEdZ7InhINDTHo85uPlI7B4wuw0baJnMv7FgwOLD%2BPB99CJ3zwZCmf8O5qhL1l0SnC7gvQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d09949fca60b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/ip13/id/survey_2az/img/checked.png
172.67.166.91404 Not Found 548 B URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/checked.png
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (574), with no line terminators
Hash 5b3bd9705af8e4446f589e073b64d64c
e25d724de194a431213080e10392963efc18ad75
ad8ec7fd0face5bd866b2a915cd34853cf60f18229acc156dfa99f5dd5d3c775
GET /ip13/id/survey_2az/img/checked.png HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KfM5sdnxko0C4cdg5xfZsHnqtghtjgoC2tu8tKH9NOy6ryAF%2BoPeeFdVcv86k0p7Xo9v6MR2ozJ8kCtmSvunRrQWCFKKnXk4ZHRLGmpjLE8yc0TIf7K8lhfMoOI5LA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0994a55ab8b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/ip13/id/survey_2az/img/app.css
172.67.166.91200 OK 309 B URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/app.css
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type ASCII text, with very long lines (309), with no line terminators
Hash 2b8d5309d40668bd2ba4b65a45a635a4
32af532e13b8cbde6c4458330d0c64c9f8001654
b894064a5e464372c66d036df3a577a8d9a4e927c47f16a02c036d8625eb3ca3
GET /ip13/id/survey_2az/img/app.css HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 00:30:21 GMT
etag: W/"6321209d-135"
expires: Thu, 01 Jun 2023 19:37:10 GMT
cache-control: max-age=43200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WF28oSfspUeVceefjQ81ZJpZ4i4g5f3NXbthazbtkVKVDy2ldYkglClYs9LgLBJB4UlAC8YzmsD%2BDrt%2FoZc1gQSoidmb6T5gVBVnfxFQLlZ29085s2WP3aHM5SCpqA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d09949fba46b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/ip13/id/survey_2az/img/checked.png
172.67.166.91404 Not Found 548 B URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/checked.png
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (574), with no line terminators
Hash 5b3bd9705af8e4446f589e073b64d64c
e25d724de194a431213080e10392963efc18ad75
ad8ec7fd0face5bd866b2a915cd34853cf60f18229acc156dfa99f5dd5d3c775
GET /ip13/id/survey_2az/img/checked.png HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pKbgwijPuIIt1keXpgKEbOgF7CGKHgVFhbZjouEqLBs5yXS%2F9ANYhvXDv6kCDzjh8SC6vJ8kAMqD6aOozeKKMoNsnqcFsyzcrgoeiqoyTV3wlG14bwk93GTQXMH65w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d09949fba51b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Pacifico&display=swap
142.250.74.106200 OK 1.8 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Pacifico&display=swap
IP 142.250.74.106:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint5F:AC:74:E6:97:66:CD:D0:F1:EA:0D:01:37:89:65:2E:98:22:84:6C
ValidityMon, 08 May 2023 08:24:50 GMT - Mon, 31 Jul 2023 08:24:49 GMT
File type ASCII text, with very long lines (1844), with no line terminators
Hash 78fb6d55dda7ecea1760fd70a900fadc
e64cd85cc99d181a8c744cc5b37f0fe6dd76d820
de5726f41246597fa8ab9e64bb6fb6f6f4875cd10cf285ade28b71d6b72986ce
GET /css?family=Pacifico&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 01 Jun 2023 18:39:39 GMT
date: Thu, 01 Jun 2023 18:39:39 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
oogneenu.net/pfe/current/universal.min.js?v=3.1.436
139.45.197.251200 OK 103 kB URL GET HTTP/2 oogneenu.net/pfe/current/universal.min.js?v=3.1.436
IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 103 kB (103271 bytes)
Hash 1b123fd41baea32c1eb585b61dfa974a
79e249b08f2d60b923a335f0bd061fd0e4156cf8
738289e65a303f6c32178e4a0783cd1bf807628e20e522e7d84e7e764ea49f67
GET /pfe/current/universal.min.js?v=3.1.436 HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://winbizs.xyz/
Origin: https://winbizs.xyz
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-19367"
access-control-allow-origin: https://winbizs.xyz
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
oogneenu.net/pfe/current/tag.min.js?z=3654242&ymid=wsglf2tplan50q4p2lpl2q6u
139.45.197.251200 OK 15 kB URL GET HTTP/2 oogneenu.net/pfe/current/tag.min.js?z=3654242&ymid=wsglf2tplan50q4p2lpl2q6u
IP 139.45.197.251:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectoogneenu.net
Fingerprint37:02:30:9E:A3:1B:CA:86:AB:49:C0:CD:35:A3:72:6A:57:DB:67:CA
ValiditySat, 13 May 2023 05:36:57 GMT - Fri, 11 Aug 2023 05:36:56 GMT
File type C source, ASCII text, with very long lines (14679), with no line terminators
Hash dd1bd926c9d267f953b3631fa55c8597
1a37cc25c5dbeb4edd216419587df4c3f270adf0
6e021b2b21122242fa40175b8df6316a9386aa36454efd2c234e891258003d27
GET /pfe/current/tag.min.js?z=3654242&ymid=wsglf2tplan50q4p2lpl2q6u HTTP/1.1
Host: oogneenu.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: application/javascript
last-modified: Tue, 30 May 2023 12:46:17 GMT
etag: W/"6475f019-3957"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
172.67.166.91200 OK 5.9 kB URL User Request GET HTTP/2 winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
IP 172.67.166.91:443
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (6282), with no line terminators
Hash 51cc488ee3a62000e3d6239c887db6e4
d08b94a6d99b81e5ce26cbb8dd440c9ddb349c8c
fda6f70e2465ca653f44d486b88d9903c5e8b5ace43225c81c15039c0c2f0318
GET /ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196 HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: text/html
last-modified: Mon, 29 May 2023 05:37:07 GMT
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jsHIOwUcJZPJjVvRgwEfPOt1jLXVUP2TY2Bo%2BTgAICHNwew2YcfcQuQIQOSD2Wz49Od6jcu9wtdjdwdrXSMLdVSLdsycWSxxp6HvW4reL2LZWOdbz%2BzOrwnij54dhw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d09949c9a1d069b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
winbizs.xyz/ip13/id/survey_2az/img/app1.css
172.67.166.91200 OK 2.7 kB URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/app1.css
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type ASCII text, with very long lines (2717), with no line terminators
Hash 3e51701f8fcb890309ba667fb05be7d3
1cc4d02812cc0e61842768a919201c518fd88dbd
c2b0276bf05aafa6b6c32e4d342a34758421a8de4cd34b599402c8a361a70188
GET /ip13/id/survey_2az/img/app1.css HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: text/css
last-modified: Wed, 14 Sep 2022 00:30:21 GMT
vary: Accept-Encoding
etag: W/"6321209d-a9d"
expires: Thu, 01 Jun 2023 19:38:03 GMT
cache-control: max-age=43200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=C7Eeh7musCanjucl44f7tK9LaE47bhNpSfYsKStk9ep2oBnJmc772YYgD1i9caK6R%2BI4DRFCVkUDQhO9KYMAmuxjesWQ2qZwBSr3%2B1T%2BYwzQWqI2CeTyNRz19kBWmw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d09949fba48b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/propush.js
172.67.166.91200 OK 503 B IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type ASCII text, with very long lines (518), with no line terminators
Hash be2de8c7fd3d3028f9e40486877c4484
a5f01b1e9a1b2ae7b7d3312c9090648dd40d4406
5d96b09ef4c895a513a404d104154a87df5f1562c0909ea70bab791fdadfa4f1
GET /propush.js HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 00:32:09 GMT
etag: W/"63212109-1f7"
expires: Thu, 01 Jun 2023 19:37:29 GMT
cache-control: max-age=43200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nvuQOuasFaMUzUMHuKTF4le4ppCD9s%2B3W82PAIPXdHafBHFcZXTcg2zWfm06W4RqfCq9EykdXiQxoaqS7vhqPhTrzYoVOXUnm41syOi6ZYbVbzY3PXeJ8Y%2F%2FswvYhQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d09949fba4bb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/of2_az.js
172.67.166.91200 OK 1.2 kB IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type Algol 68 source text\012- Pascal source, ASCII text, with very long lines (1281), with no line terminators
Hash 9aa26c68d5518a373e2d2417f7856453
a06f98d36fa061cb5982b40c14638f704c1a8d9c
d391bea40f329e00755c4354a0e03eba6116921eae3bd33b362053c5b7d24c4d
GET /of2_az.js HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: application/javascript
last-modified: Mon, 31 Oct 2022 23:17:04 GMT
vary: Accept-Encoding
etag: W/"63605770-4ac"
expires: Thu, 01 Jun 2023 19:36:46 GMT
cache-control: max-age=43200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kXmTOu3zithg1U5zTaHirXYmy9S5Bp6L%2BHeTsrkfeSkqUvmICuMwO16NGOSsbE3NGYaPCTQoHY55%2B9ZkAOr9zeuFF%2BL1d%2FZh915sjqGEGzl9QSwb%2BuZuy0ycBfVVdQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d09949fba4eb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/ip13/id/survey_2az/img/spinner.gif
172.67.166.91404 Not Found 548 B URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/spinner.gif
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (574), with no line terminators
Hash 5b3bd9705af8e4446f589e073b64d64c
e25d724de194a431213080e10392963efc18ad75
ad8ec7fd0face5bd866b2a915cd34853cf60f18229acc156dfa99f5dd5d3c775
GET /ip13/id/survey_2az/img/spinner.gif HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KoEtcuXjEmrpjP2NwHWczrquIfu%2BmhI0tOX%2BeAsUvrZuE2hdmTT6bujXyT5FiKD%2BFsTDb9G1IdbEoR63swrGW5H4YmwgAFMC6o0hEcG4ujfOAE3243GL0dBFISmn5g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d09949fca5db4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/ip13/id/survey_2az/img/app1.js
172.67.166.91200 OK 136 kB URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/app1.js
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 136 kB (135671 bytes)
Hash bc5848292d149ecf1e5eb5cc52149b84
1227ba2539a19ea2fd1815c273b83f5a06553f26
c330e70537a6a65cdc8b847b1742afa0e6f01109c87c9513eb8efe99302059cc
GET /ip13/id/survey_2az/img/app1.js HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 18:39:39 GMT
content-type: application/javascript
last-modified: Wed, 14 Sep 2022 00:30:21 GMT
vary: Accept-Encoding
etag: W/"6321209d-211f7"
expires: Thu, 01 Jun 2023 19:36:09 GMT
cache-control: max-age=43200
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ccis%2FIpFfJ3bmSy0Dx0qFmNnvYh1zbd2KSROxrCv57279IIFA2NqItb5Zvbxb%2BjJbugAosJ9euhRTkMOSoUQ267RgTG%2FBL2nQZRKdfPrp6A9Mf2aVYgRgUiNd2%2FxVQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d09949fca62b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
winbizs.xyz/ip13/id/survey_2az/img/spinner.gif
172.67.166.91404 Not Found 548 B URL GET HTTP/3 winbizs.xyz/ip13/id/survey_2az/img/spinner.gif
IP 172.67.166.91:443
Requested by https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Certificate IssuerLet's Encrypt
Subjectwinbizs.xyz
FingerprintAE:E3:98:3D:18:96:DB:95:6F:2D:1D:21:06:28:D4:C8:C4:FB:20:D0
ValidityMon, 29 May 2023 04:54:36 GMT - Sun, 27 Aug 2023 04:54:35 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (574), with no line terminators
Hash 5b3bd9705af8e4446f589e073b64d64c
e25d724de194a431213080e10392963efc18ad75
ad8ec7fd0face5bd866b2a915cd34853cf60f18229acc156dfa99f5dd5d3c775
GET /ip13/id/survey_2az/img/spinner.gif HTTP/1.1
Host: winbizs.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://winbizs.xyz/ip13/id/survey_2az/?cid=wsglf2tplan50q4p2lpl2q6u&cep=VoQauGnhgBPKxt7JG3tcCV1Tuh1y0vDzXjBHxJLM83azbHno_s_CuU_rEB7-uHiQvtDv4h_cP4-uIk6qHCOcthwMeigeU_JRrkasj1LyTVCxvovC-Yp4cwSTLcjcMA8ypGJUki_zGFW7rIuBf0q4woi7iuP-uv94HTTbqGdRyDfaf4GVan-3OYBmAPZO-q6MaaJyRRmIAnZQjCNxbC2Z8yrqB_eNEgtf4ZVDcfV8kAXyoTVekuq3AWbgbGIFpmEY9_iVIgYZF7eROWfWAMU8IsAPtKIRx1VrbLdgZiclb0MzUqcWcbZDoLlPFHi0M6MCMFo9bH0oT94LtZ62w8I3gg1hJdvfi4wbkKDDQ4GqEJ7u22hpsOz2wQJuANXTXAnV9OgKoqahE__zGMxaZ8E7wTvgzAa_7HkJ7lVpc3OiLNE&lptoken=165b85cd645f65da6196
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 01 Jun 2023 18:39:40 GMT
content-type: text/html
cache-control: max-age=14400
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XnsXXW%2B5P%2F%2F%2BpkO%2B2lwQrvHB5EHSNCu6QoX4C7ah50gDk%2BhOnufx7ac7eJdSN9%2FVsviPWaBWz3GaE%2Bd8au%2F7hi%2F7XeCu%2FED28v%2B6aRscxay%2Fb0IK7ljcS3UhZQFTcg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0994a55abab4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400