getsurv2youu.com/link?z=5339054&var=2525&ymid=5z4ub8tmc3xd5r2spiz28gw80,16592299,5,2525
139.45.197.239 0 B URL getsurv2youu.com/link?z=5339054&var=2525&ymid=5z4ub8tmc3xd5r2spiz28gw80,16592299,5,2525
IP 139.45.197.239:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=5339054&var=2525&ymid=5z4ub8tmc3xd5r2spiz28gw80,16592299,5,2525 HTTP/1.1
Host: getsurv2youu.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 04 Jun 2023 12:58:48 GMT
content-length: 0
location: https://trebghoru.com/link?z=3956710&var=5339054
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 54122fd35a6f734404c1a5affdcd7fa5
link: <https://trebghoru.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=8489bf0ce8a3445fa61d7f96ca4e1ed7; expires=Mon, 03 Jun 2024 12:58:48 GMT
oaidts=1685883528; expires=Mon, 03 Jun 2024 12:58:48 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
trebghoru.com/link?z=3956710&var=5339054
139.45.196.64 0 B URL trebghoru.com/link?z=3956710&var=5339054
IP 139.45.196.64:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=3956710&var=5339054 HTTP/1.1
Host: trebghoru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 04 Jun 2023 12:58:48 GMT
content-length: 0
location: https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp&autoexit_86400=3953544
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 6d94ca991b9c38839d552bb840b91d2a
link: <https://erailsiwsurvey.top>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=ea9e6d10162b48a99e3ee8f60b017194; expires=Mon, 03 Jun 2024 12:58:48 GMT
oaidts=1685883528; expires=Mon, 03 Jun 2024 12:58:48 GMT
OXCCLK=4105106.1; expires=Mon, 03 Jun 2024 12:58:48 GMT
allcnt=1; expires=Mon, 03 Jun 2024 12:58:48 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/survey.36a8ba6b.js
172.67.173.113200 OK 5.5 kB URL GET HTTP/3 erailsiwsurvey.top/js/survey.36a8ba6b.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (5437), with no line terminators
Hash 6ab7c487e6ed70d2f7241a5bf22a69f4
aea57164a36967cc918348e3117662c883c0ef10
8b44578bb3662e18c2c7a6972b9efedb7daeeaa4a87695dd5c912b1ccd897a9a
GET /js/survey.36a8ba6b.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-153d"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Eb5TCmLbv49Qa0xwN5zFgIMqwS8GNfHSqkxIMhJj46Aleiov9oUcLShM8Gl1%2FlWH6Xvau8tA3dTVuZwxl50YqIyRlfRvoq1W1PZ01OqPgVvIlZ%2B%2F06buOWNqPRJXT%2Buq82vd2TE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597a4b581c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?
139.45.195.8200 OK 65 B IP 139.45.195.8:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash 75e35d79ceb1fd14a36ecbff2c3ea81f
9fbbfb7297f66167d72c5cc537b46f1367fcd67e
59b0ee59a0475f7119c6f8cbe377cc556b6ce204d85f8b655c3b78e936521986
GET /gid.js? HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://erailsiwsurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=b3c3c452641b4100b8532007bde8b5db; expires=Mon, 03 Jun 2024 12:58:49 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?
139.45.195.8200 OK 65 B IP 139.45.195.8:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash 75e35d79ceb1fd14a36ecbff2c3ea81f
9fbbfb7297f66167d72c5cc537b46f1367fcd67e
59b0ee59a0475f7119c6f8cbe377cc556b6ce204d85f8b655c3b78e936521986
GET /gid.js? HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Cookie: ID=b3c3c452641b4100b8532007bde8b5db
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://erailsiwsurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=b3c3c452641b4100b8532007bde8b5db; expires=Mon, 03 Jun 2024 12:58:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 0f9b480992f630430e33e1063b414542
bcaedb7914f5c0069c7f4187dad0ae8a4e2d94d9
bfcc73247d3e026090d69a4b8348f2a506fa1f8eb40fbd2e709482b7f5c5b750
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 12:58:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp&autoexit_86400=3953544
172.67.173.113 3.3 kB URL erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp&autoexit_86400=3953544
IP 172.67.173.113:0
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4701), with no line terminators
Hash 0913cd12e360bbd1a54efa0cf32f4e1f
357c9c9340abefa7f983cbd236cea4919fd6ea2c
75eee425fa9973f1d45f34289609abfac1d38813f17e3a68ed6509b702bb2f53
GET /survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp&autoexit_86400=3953544 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: text/html
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vvq7t1UiCrgrxoQ9s%2BDpfkZIyxGzrTpPoNHn4UmIxTSLTzyItImeuchoeubSqTT6NvRoL55iwq3D2A7Q%2FqwDzLntt3fLk4ymENKxlfCy9rMz2piQvmcVWUqTK8znvNmCrVddROE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059786fdd0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
12664df8c208.defenderads.com/?p=2525&wid=139215&wid_hmac=63d4d9f19c2c15b97ca317940377d186&click_id=GbSxZYReXqp22Xi2QKRXhU&co=1&noback=1
94.237.103.119 1.0 kB URL 12664df8c208.defenderads.com/?p=2525&wid=139215&wid_hmac=63d4d9f19c2c15b97ca317940377d186&click_id=GbSxZYReXqp22Xi2QKRXhU&co=1&noback=1
IP 94.237.103.119:0
File type HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text, with very long lines (860)
Hash ce031ae4e88597627ac0f4302dff31e2
37e168583a6712fca243cdd1046ecbe2a4364507
f12e21d29e6b56724a715367f0aba0a90e6855df1cdd59be6f5e4da4434c24fe
GET /?p=2525&wid=139215&wid_hmac=63d4d9f19c2c15b97ca317940377d186&click_id=GbSxZYReXqp22Xi2QKRXhU&co=1&noback=1 HTTP/1.1
Host: 12664df8c208.defenderads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 12:58:48 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: rts-trck=1; expires=Sun, 04 Jun 2023 13:08:48 GMT; Max-Age=600; path=/; domain=12664df8c208.defenderads.com
t-uuid=5z4ub8tmf3c17ds4ayi80o04c; expires=Sat, 04 Jun 2033 12:58:48 GMT; Max-Age=315619200; path=/; domain=.defenderads.com
rts-trck=1; expires=Sun, 04 Jun 2023 13:08:48 GMT; Max-Age=600; path=/; domain=12664df8c208.defenderads.com
traffic-back=ok; expires=Sun, 04 Jun 2023 12:59:18 GMT; Max-Age=30; path=/; domain=.defenderads.com
last-modified: Sun, 4 Jun 2023 12:58:48 GMT
expires: Sun, 4 Jun 2023 12:58:48 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
erailsiwsurvey.top/img/comments/person-2.png
172.67.173.113200 OK 6.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-2.png
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 3e6eaea87b2891590972dd11373b09a3
f038c6e6306ca708defa2b601bf9477f0cf78a3d
15aadd2e7f4f83e79f35e760da382fb8b5045d2cf506f531bdc15b7b27f699a5
GET /img/comments/person-2.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/png
content-length: 6428
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-191c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=E5ZCyUglV6b1zENu0CraLq9pSNJ43sWMlnzbJhpdKEnB%2BSco%2FNMQ9htxebFJ8hRl3bmq2omWtadTB64Tq7PiRtdcydVkR0RMaEasCY%2BJ7X805UNEmLWRhcwWjjmUh%2BgbHkgUOsw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169fa1c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-4.jpeg
172.67.173.113200 OK 2.7 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-4.jpeg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 6cf64555e2de0ff8b5391081b648b89a
a32008bacf7f8cd3859eb86c6c8d36eeb15dbdf0
d4f513bf3a5691b900739cf79285d18ef09ef4b81eca648261b15a693d21818d
GET /img/comments/person-4.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 2709
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-a95"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SVXxZnUUy4WVbtQERHcgEf3TN9TqJmYOW2KmcDcK1QEqbXXrdDFWVbsPganhr5ymZCoYgCWo32SpBkAEFahCU95qROhWex2CD32DHCnAANtuPmMsRHiB7zq%2FyevpUNZlEobkqhc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169f61c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-5.jpg
172.67.173.113200 OK 4.3 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-5.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 21fd6ef6d69b527c02e92a8c23d28d52
5980b75edc23f7fa2f57fa257cb67c9efb86fa58
f37490dbef620959d7124e3de027c5b5c43a57dc90737163947a6725444051eb
GET /img/comments/person-5.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 4333
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-10ed"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s1uXbvoSdrP8Ib7G13ERTQ2NYRc7dZ3N2Yguq5PJvLD3R8C8hcbVlXioq6cuJGGcsHQ0I9G2OtYc1vcJdXtPUseyraDp4e1oIjB7ZFXQcYL1ZcU4P87GE5D9km0LW26V8wQ1jzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169fe1c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-6.jpg
172.67.173.113200 OK 4.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-6.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash be9ff88491a5bc0745579a3813eb2cbe
870f88a7fae9fdd928af33f47c5ffdddc6a4082b
698d413ddf6b2ec37acf0e982237d239bd912cb097e243cb355855ac2b8548d3
GET /img/comments/person-6.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 4392
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1128"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5QLWj1ZY64SWBMaxhSe3eewl3NZ8HV9tt%2Fdc2meAXDjKX47KEt51Lg26Ni2fp%2BkbH6RqvcINhrXNbd27zG3yR7d35RkFNJky6ji6h%2F1ybRrY2QmkqBV%2FIEJHNtl69HqqSwLW%2FJI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169fd1c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_rtc.692696d0.js
172.67.173.113200 OK 11 kB URL GET HTTP/3 erailsiwsurvey.top/js/_rtc.692696d0.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash 769aca51bf83343eb2ac227aedcd4ff3
2a193572dec77357bdbcc9d02e629afb942fe61b
7110ad0251bd71ba0caa74c691d850c8e3ea55d53d6195408d21d4777e2cf293
GET /js/_rtc.692696d0.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2bb5"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=squG9%2BzY0M72M1Ol9w4BCPY0FoYa4G3YU6A94AXxPhKOcRLkQggVV8rtdVflQp5VJrzdkxtkfLL74SRerpgEWXpUNsPpbsZmDef2bM0f%2Fr1JZ9jMZZTZdVViBH340%2BKSAvVrs%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e6f5c1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
12664df8c208.oratsecure.com/?p=2525&wid=139215&wid_hmac=63d4d9f19c2c15b97ca317940377d186&click_id=GbSxZYReXqp22Xi2QKRXhU&click_id=GbSxZYReXqp22Xi2QKRXhU
94.237.103.119 15 kB URL 12664df8c208.oratsecure.com/?p=2525&wid=139215&wid_hmac=63d4d9f19c2c15b97ca317940377d186&click_id=GbSxZYReXqp22Xi2QKRXhU&click_id=GbSxZYReXqp22Xi2QKRXhU
IP 94.237.103.119:0
File type gzip compressed data, from Unix\012- data
Hash 2188ee9db0c7f35c6e8e9514bac36570
07aeaa2c5d474eabe79db0909f073cd1fdb722a5
d0acf299f0d74fb3f9d456725cb1fff4ba1ed9b9aabf4e0267fcb647b7386df3
GET /?p=2525&wid=139215&wid_hmac=63d4d9f19c2c15b97ca317940377d186&click_id=GbSxZYReXqp22Xi2QKRXhU&click_id=GbSxZYReXqp22Xi2QKRXhU HTTP/1.1
Host: 12664df8c208.oratsecure.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 12:58:47 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
last-modified: Sun, 4 Jun 2023 12:58:47 GMT
expires: Sun, 4 Jun 2023 12:58:47 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow
content-encoding: gzip
X-Firefox-Spdy: h2
erailsiwsurvey.top/img/comments/person-8.jpg
172.67.173.113200 OK 5.7 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-8.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash 6b10e71656e51e27520e854712b44f1c
f78b92dded977e9f275aba726453138155420bcf
64588485da7d470991fdba6c20a6d05c7ad39f92cca72769a95cbe3d873e8edc
GET /img/comments/person-8.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 5748
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1674"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wWC1UIGBo0lJzjktO0R5ACstTMNmiA98MjHDAKSwwtJIXAiPfkOwaCL3s3%2FcXGEAkmXGhYjtjFXrnQmjWZoJSPhjiR8raAKHtplmBVvUnjoGKGyYoqfh84i0f2pbB2DxAyohVbs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059816a001c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-3.png
172.67.173.113200 OK 7.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-3.png
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 2f62e53b6333bc904be22a37a1fd0ace
6e972fefcbe0193d9b28817c47c1ceab2a0235d1
9128194f1b1bf44435a3e80f994157b94a40a3365cd8f0794dcadb41a24c3b41
GET /img/comments/person-3.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/png
content-length: 7368
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1cc8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bnjnPl%2FGSL7AsnhGcoa6%2FQpNBI3wfE4vwVnuuL3c2UuVuqD3uEDCDF%2B%2F41LSPWlrTTUck9sU5reUDuL3FEFO4NMAlzmM0ycaKGCVZgF1LQ172g8sZmpiEoQYI92mTA4wZW%2Fp87U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169ff1c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-14.jpg
172.67.173.113200 OK 5.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-14.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 6012ff0d59aa6a34aaca1ea8f2fa88fc
ef59662c9b666106486039e9f1deb40fb4a8ff77
2c020310e91430067c7128425f14ac0ff1710aea5e67c144a8fceac46311182d
GET /img/comments/person-14.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 5392
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1510"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JkRf9SaG%2Bh9opR2BKk9g6eYV26HaCBGXk5h7BVDHbXS8hER9ZOfxLu37epq93rByzqyyX9iikuXyUc5AcFy8X0DxPt8GcqTnL9agunVwnPn1N0M97O2VhApCmFvSsPku84vp1sY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169f71c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-react-dom.production.min.js.708dd72a.js
172.67.173.113200 OK 42 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-react-dom.production.min.js.708dd72a.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash bf59e2beec56bd492cd1247c25672598
4af373f2ad8d7a2bda18232ab4740abdea6ecb7c
04853b2a6175aa975ebe4d756699da4d7a9a156fef4895cf65b53c8fdf6c1389
GET /js/v-react-dom.production.min.js.708dd72a.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1f8eb"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4%2FtuID7MDmlBx1fzTsoNPK8maKh0Lhn1whRKWPBVwTy09Ig4PRXTSECUIbXIDZ88dUoPnNNoseExcqTJwAwpnfmYTPd5juc%2FD1EJAGeETA2%2FGsbHFht%2BN4VUCtakvNd28OYL3ME%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597a4b591c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-9.jpg
172.67.173.113200 OK 5.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-9.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 529370f9fd3b0f4da6c81ca91a931155
1a4c3e0e7af1ce30dc2ca18d48b5fc3f1b40aad3
cdf1b8dcdce4e9b76157ce90e086ebafb100063eaeb091e97087d97f5d0fb50b
GET /img/comments/person-9.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 5190
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1446"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4q8pUK9PznDSbiF%2BZtzAH8PgZ4y%2BYih0sUp9O3foV9wSVU31%2BstzDYkCNSVORk3U8oa5Qowjkwv7oJHDddM9e%2FP0QsEGfSMI6Qhi4q54j%2BgG98TXN3Pasy95NV2WI7XPdqOQ2TA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059819a221c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-12.jpeg
172.67.173.113200 OK 3.5 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-12.jpeg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash c937339f4ba54ff7dc150b9865c29084
44206828ca23cbed303193bde1dfe47bdc532972
8e872daac17de58d352c9f4082e6e35af76a8b2138c142a8cf0fbacea195c73e
GET /img/comments/person-12.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 3519
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-dbf"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eSs65uQfbdKYrpBXOSyec3jk5oNm%2Fjd1xFRrvsMADKV3hgMuFDw%2BIZJuxCaJnx%2BiDGhkMk50%2BNUfQhJW7Bm10VCBtoTb0X93dbpQb4hH43%2FCMDGbX%2FylwyQZni0I6k%2BcKNIptyU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059819a241c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-13.jpg
172.67.173.113200 OK 3.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-13.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash a3364ed9e772ae6f696b814072001bf8
b8f34c657c31bf1e4d42b5d864b2519493d80e92
88f30b8552d0ab928d895390b337a0049405f3b1e8446631e606ba787e1205e1
GET /img/comments/person-13.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 3172
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-c64"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lu4Q8VFyn70WXBxU9347S6Htc9ljnV2Z6XKqXycvkE0VBqHpffvb6u8BBvnaXiLvYDDnMjGOUgjvLNCN05wr0NBTJR0rWTA5W00AzL06V58qMsVAhZ17UIsCYhB2x0W2x4MJg6s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059819a251c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-10.jpg
172.67.173.113200 OK 6.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-10.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash 044ab37551bfe632f53b8f15d991f36e
77fdc6210608e5e36e1d36ac7fd867104cb20d9e
36adcb32026c016feaff678063911fcc9e7985e9f0c56bb1daa776f98964ef91
GET /img/comments/person-10.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 6178
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1822"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VpK8rRfF6BuXj3FKEFEfnw1qZV56Tnzd6ganeLuydy3zyyBr2G8oQJ8S7009%2BEr9fkuSfKEkHhbaqpR3oJ3iH9oZ5O13c%2FuGV%2FnD%2FKJZd%2FQJwzOxAKnENBmdLU4nZ9UizxsDBC4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059819a211c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-11.jpeg
172.67.173.113200 OK 4.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-11.jpeg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 3924bdc784dc4947f52b779aa4d5a0aa
1e3f3fdd99490addd60014aa7327fe27c6bd5589
b3f882f57f9a213d85eb1c5c6a8a1451bd16dfcd9e4bd00e0a74584422dbd950
GET /img/comments/person-11.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 4175
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-104f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=K8pMC79dWiSJwHbESIoB3ELOdVrngLbZKeYYNpfwP1dy%2F7zxh%2Ff13lw1YWDPRZXQAIoCtb7orAujmVTni%2B3BPh%2FM9wo6SOb7K1RgmM3whsV3iKKLZxWBiANVTnhy5Xo2vWoBTUQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059819a231c12-OSL
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash ca359c54531ea823812a5abbcf85eb97
6c9d445dc87b58e70dfd8d80a15374667f9f0b4f
32015b73ad6385df42848ae288806993cab31ee8f210e61ac5d2857fa0d30805
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 12:58:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
laugoust.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=erailsiwsurvey.top&var=3956710&ymid=5339054&var_3=689207940961546423&var_4=null&dsig=&action=prerequest
139.45.197.250200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=4842423&is_mobile=false&domain=erailsiwsurvey.top&var=3956710&ymid=5339054&var_3=689207940961546423&var_4=null&dsig=&action=prerequest
IP 139.45.197.250:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint99:7C:6B:09:6A:A1:BC:70:53:D5:2F:97:56:F3:C0:A5:06:9F:80:C9
ValiditySun, 19 Mar 2023 05:11:02 GMT - Sat, 17 Jun 2023 05:11:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4842423&is_mobile=false&domain=erailsiwsurvey.top&var=3956710&ymid=5339054&var_3=689207940961546423&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 12:58:50 GMT
content-length: 0
x-trace-id: 32a54570d4ff06dfa505a5abf6007ef5
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.15.101 471 B IP 104.18.15.101:0
Hash dc5b07fe1615d68b82c10372a9a494d9
0b59b437171859b898d1ab432b5979ea105b0272
184c24bffe7600ce8aee9e68816ecd4bf2211b57e10ef72bce520457b90e0ea1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 12:58:50 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Jun 2023 05:19:53 GMT
Expires: Thu, 08 Jun 2023 05:19:52 GMT
Etag: "0b59b437171859b898d1ab432b5979ea105b0272"
Cache-Control: max-age=318534,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d2059832bec0b41-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
37.48.68.71200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 37.48.68.71:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1532
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sun, 04 Jun 2023 12:58:50 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://erailsiwsurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 12:58:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
142.250.74.35200 OK 166 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
File type ASCII text, with very long lines (749)
Size 166 kB (166186 bytes)
Hash ee07ba65373413be83ec0d45887c2a44
13646acedb5d781fed2599c46634b4e58b8217db
d946e8f3fb4fe90a5ae3027b91a76703106e2c5c1d762fc3fc230895db7b6048
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 13:34:38 GMT
expires: Fri, 31 May 2024 13:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 257052
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 12:58:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
erailsiwsurvey.top/js/v-index.mjs.7a6f6513.js
172.67.173.113200 OK 35 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-index.mjs.7a6f6513.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (35051), with no line terminators
Hash 9f7ddd785647e7de7ff506bbe6ec7ca7
b04873210640ef785259fb4405f01c5e6f96d5a2
10338634d2cfa9fec434ea07a265687bf552d382e11b107d7afe649c05ac5627
GET /js/v-index.mjs.7a6f6513.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-88eb"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qaeuajVds8DNHx846A9KJVEoY%2BwiEBFAbincSE%2F9YG0TQTJI%2BLxGseX%2Fy5SIZlb%2BaLPi%2FKc8qcz9VmsmoKK8aC6HYyPejCy0aOCmlcsnNOBOF%2B5hqLEGoXiikhkDsMOPijI6Mdo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e7f681c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-index.js.a18034f4.js
172.67.173.113200 OK 40 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-index.js.a18034f4.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (40296), with no line terminators
Hash 3698267f8797b04e520279c94f8e0805
6d3badcf82c2faa17f61efdc44beff2267fa84e4
fe3a9cbf06b7238b24211ed6af8cf947aa8fcfbd0d6a81601993639a48431f20
GET /js/v-index.js.a18034f4.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-9d68"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pqoOx0nNhvvOsV6FPTWHxc%2FV0QxIU7GvLXBTjDR4ZD8vZJNZMzy9qZcw2PamXdW01NWW5xiI3H6n3kr0i9Wbg%2BoSNlpXJfbuTM%2FofLgihetjjJ7XgNz2dDtc5sRdmPHuHmMZ2t0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e7f5f1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-immer.esm.mjs.28802142.js
172.67.173.113200 OK 10 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-immer.esm.mjs.28802142.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (10496), with no line terminators
Hash 18f8b1a5408bb552103bab2a9e5cba70
72ba4dd83f4e85a45017492cd8ceedceabcc7587
1fce72cc05122f77f6dfd7ddb9fd43853cc9ee2d3cda9478afafcd48388e122d
GET /js/v-immer.esm.mjs.28802142.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2900"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qMiJhPHo7A%2BQaRrbpKLzONA3GQyDxAk9%2FPkzjdFTAfuckhqByLvJ6icfV027i0M%2Fo3%2BVMmyxoaJYNnW7LrvTplVHK4vjykMKKJUZznZdzYc%2F4eRlhUK%2F4m7Nzts67JG4UJMvCvU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e7f631c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/pfe/current/micro.tag.min.js?z=4842423&sw=/sw/sw4842423.js&var=3956710&var_3=689207940961546423&var_4=null&ymid=5339054&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
172.67.173.113200 OK 42 kB URL GET HTTP/3 erailsiwsurvey.top/pfe/current/micro.tag.min.js?z=4842423&sw=/sw/sw4842423.js&var=3956710&var_3=689207940961546423&var_4=null&ymid=5339054&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type C source, ASCII text, with very long lines (42367), with no line terminators
Hash e2c1209fa034e82830b27b2c7e00a7dc
0a3057e56de2d45bee9443afba1823ce0629f199
ea6ad99d1789576a76dcb7c3d970a1fb9c81b4b0c493eafc64023b85686a2bcd
GET /pfe/current/micro.tag.min.js?z=4842423&sw=/sw/sw4842423.js&var=3956710&var_3=689207940961546423&var_4=null&ymid=5339054&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-a57f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tbNHKZCIlBho0GNXxoNrWRdxt3mZVPYM3fHFMVEeNDBBkXe7ax3nCRHPcmMKgLs1oDAQVQdg5%2Bd2HxiD9O19k9ENHKNtMpQYY50e%2BJ%2Bsgebp8Kn7%2F6aJlbHW4K6mY1GR7eSADp8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598039071c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/dict/cookie-consent-1.json?v=10
172.67.173.113200 OK 6.8 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AdB1MTuLImS%2BDM8gGEYtj9Zguhn%2BryirSn96IsW8MwB%2BPzDiPAVF%2BujwkUWeR0n6lkpoW4BtN0Y2Nc2iTB7KTLRYItZpj4LNtsEoUlIrl3HHiP2kXvhSbdwjEuvce3n%2BTXHeSQM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598028f91c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/favicon.ico
172.67.173.113200 OK 1.2 kB URL GET HTTP/3 erailsiwsurvey.top/favicon.ico
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/x-icon
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IMfMHkUoH31KdVHFuQ9l6LetSMASi51bHKWmCFYT3DZYpKPhQCFkCXFu%2FrDJkRoNn2BLT7EqD%2B1Tcf637w%2BZvaGYv9kxAcB7AvP%2BAtglvbneSPblvk8i11bGLqoHP%2BCcnnLpuuk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597ff8cf1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_core-survey.2e2c57dd.js
172.67.173.113200 OK 230 kB URL GET HTTP/3 erailsiwsurvey.top/js/_core-survey.2e2c57dd.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Size 230 kB (229458 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.2e2c57dd.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-38052"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7075
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F4ayPxqpXwlzamayovch1tzzOizuFyw8HqOG7Ka1UwbZAwSQh68wB7J65tE0Y7pBoa0STL9IFU%2BM2%2F82uHuJjLuYcHhgYhwZqR9aT0DzpqmBMj8arWh%2Fnt20V45mYwKLiZOE3S8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597ecfb71c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
172.67.173.113200 OK 4.7 kB URL User Request GET HTTP/3 erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
IP 172.67.173.113:443
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4929), with no line terminators
Hash 26de6480612297db791b37fc60de79ee
782348fe6a88d506c1e6de65a586c0ac6a2ec34d
b9f53a6b7ddb29070ed1bdf87f44f45126cee362599b1049f4aa3edad01194d3
GET /survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: text/html
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7ulUJ1OTv5ZatzO6k7bmFd8XqAYNWfICgEBXcGyaHXeWQeNWC4YHg%2BP7KiH8qp6BvNbHcv0VPQL08MvGq5%2BHq6mccqAW5jbPa4hPwAjA9B%2BYHq2JtgtNczqwtSjtn3OVRaD022g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597d1e1b1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_each-land-config.c1df2b79.js
172.67.173.113200 OK 72 kB URL GET HTTP/3 erailsiwsurvey.top/js/_each-land-config.c1df2b79.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6b75c51d58a8ab1832c0c5167c09e04a
3e201ff870f80d120522c2f58a9f4eec0c4eecb2
7790285885c82a7264b458e8c364358aacff59c0e7aff4e60776a5704cea3a36
GET /js/_each-land-config.c1df2b79.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-11824"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z2vZLd1UdvDfEdKjcXUxKbCLncORlKIDSew118dd7faZQhLavdU9uUl02xg1VUdfPwGY9mmlo%2BmVg34%2BFOVNpdpDvuRvYFSje0eAkTX1yGuQyg4BFaN3BseovfQDoXFBNihA%2BR0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e7f651c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-1.png
172.67.173.113200 OK 6.6 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-1.png
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 8f9a954bf05965bb41cf97a7ddb7a375
de9db936bbea75043e08a55d1f371678fca2270c
a787bd40650924a7bbc61d6ea0bbcaddae4b3129fd8028b68c3629210e41e26d
GET /img/comments/person-1.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/png
content-length: 6577
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-19b1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=05QkyHQHxaUFzBvZBw6t%2Bp%2BzxCCF6Ngl3wXRTFc4z9Svt653XyJV8ZysNLRHqY%2FzquLzKaO3zIy%2FR8GqJZxaXoBy3qsGJkgeiMMNKvP4f72q03IsMWVru6Dv5sO1iZGJiL2sImc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169fb1c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/sw/sw4842423.js?var=3956710&var_3=689207940961546423&var_4=null&ymid=5339054&ab2_ttl=5184000000
172.67.173.113200 OK 1.3 kB URL GET HTTP/3 erailsiwsurvey.top/sw/sw4842423.js?var=3956710&var_3=689207940961546423&var_4=null&ymid=5339054&ab2_ttl=5184000000
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash c21b76d8c5cc98d28e2ded4d7182cfb3
615a50d523a68a9b87e50715c88671e6b70e2868
ce15252772a764d35cbda3d5faeeb3c3e190ed7c4a1c56f75b0997666ad44322
GET /sw/sw4842423.js?var=3956710&var_3=689207940961546423&var_4=null&ymid=5339054&ab2_ttl=5184000000 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; finance_ID=4aeefcd85e06e32aabdaaba1a588a2ca
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:51 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qkqETqK1OTea2P39CLt8NU%2BLT9e8eGZ582gWen%2BNO%2BKmR8WuvY8vMvdpJ96hgIhfMY7sSDzYiOPLl%2FPOgyNUA7Rt9MwcyK%2BgqMIJXf2yVVzwYR%2FHHbI%2FRKpLooP8X8xWcYpurHM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d2059852d3e1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/unnamed.jpg
172.67.173.113200 OK 1.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/unnamed.jpg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-562"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7073
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M0ALtK%2F4V%2BK4Djhn6x1ghDK6uEvc8DN8Cswl99VchZgSKwNxbGAlJZplV5aW%2FQcWXSvin9aiv2%2Fa%2Bnw2Gsd0fVWVEfqtCeeGn%2B8%2BqT6yy9tNtk5%2BwFvW1z4L%2BdBnP9uRyod%2F65E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598169f91c12-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_is-browser-supported.c49ec082.js
172.67.173.113200 OK 1.0 kB URL GET HTTP/3 erailsiwsurvey.top/js/_is-browser-supported.c49ec082.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (1102), with no line terminators
Hash 347149a5f2db6ba9662854836bd194ba
dad9564747ff98e7449226386615f6846b11920e
c84c175bb7a22aee56cd585dfeec157387639c062a12b726f8f4dd3f0c36cc7a
GET /js/_is-browser-supported.c49ec082.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-3f7"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2008
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a%2FQPp76CeWGa3FcEVGoQEf6T0NTVHXScb6jzVQLq%2BqUxkpf%2FFkQAeJkF6OBYzzKaMRRo6kmzZwDm%2FBbweAB3vz5f%2BBfu9oVWhFMoPKGUdDXzYUCJ9KqsYj4srETXBuh7rHbf83A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e6f551c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/icon-survey.svg
172.67.173.113200 OK 3.1 kB URL GET HTTP/3 erailsiwsurvey.top/img/icon-survey.svg
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (3164), with no line terminators
Hash be0098d1d8838c0172c3107086338256
924bedb900cfbbf46aee1acc68b09666d1cd08b0
cce75f9c57b1c4430adecff06f7575ac7316c3381477a841f557646d0ac6af8a
GET /img/icon-survey.svg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: image/svg+xml
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-c19"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7075
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qq6NAG2GL2sjbdOBnlQwaGWFBvHhzqEiVECXV%2Fx0c1WFf8n5z7BRMb9kX9hdgbAbI%2B2wpGJrujy1HEdFlP24OUcJ17EZQG4uGRVYL9VAFVHeMOjwSlp3RPcqiR%2BOOpxMZayXGG4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597f88791c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdntechone.com/stattag.js
188.114.96.1200 OK 18 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 188.114.96.1:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (17871)
Hash 0fdff67feab23cc69ecfb6800fc54cb7
eb84c650e6d27e290795207b1f37dd7b67f2aa06
456e420aecd5ac679cc2bcb33daf7c063f54894fd076e99e05c06629234d3378
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:53 GMT
etag: W/"646736c9-4859"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3314
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EcPyO35StJO%2Ff34ev7vFrLZ2P3bWHUzYrGzr8XTY%2BLoum9M0tMTyKTwOiTfoSm8%2FC7mIMQhqGigHUpuFs2R3NkT5%2Ftlpr%2FasuAT%2BXf6qdXvAAPYjMqMdbQ%2FunFIUNZBYNw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d205980abf9b4ff-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
erailsiwsurvey.top/css/_core-survey.26c0898c.css
172.67.173.113200 OK 3.2 kB URL GET HTTP/3 erailsiwsurvey.top/css/_core-survey.26c0898c.css
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (3187), with no line terminators
Hash 2e6143d07cb0a0273cd0fded0cd7b430
4853285adf3a468cc8a42b1c6f17d8353cfef896
f2690b871425a66071365ba5be475a5089e8074dbdab7df95a71bbee62e2f5fb
GET /css/_core-survey.26c0898c.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3194
etag: W/"6478a1ef-c7a"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7075
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pzLBLnYDhRFaW7go5Iqc9C5NPxoID2sdWd9i2BC2vkWDdPoE6hIiP4tlIQ32mQ01kVhuar%2F0NTsVjUHDTv00R0QIxYwmNLG7B0f32Nq8J%2FLADinkNyKXUMNCv1frEi0pzeUnKzU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597edfbe1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
172.67.173.113200 OK 7.1 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (7382), with no line terminators
Hash 2b4cc82e0d376411d693843a0e6f488c
56549c7e7e3651c6b62f88eaa7be587288304731
b692b6f461406174b198203365d5609055c849c8b6e6356cb68d184caf71dd97
GET /js/config/data/sd-1779001.js?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1bce"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1261
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qCjcUWzyP%2BH6sdMbvvkRBHp%2FHjTkXuBWivb6fr0GFmVs70zPX44Bwkp0Z8eZ6IoJqZk4zWZ7nYt8mnaSIxYnPXTp8dD%2FMjRERZ9NIUaYI6cx1G5OOJpHn6rFp0d6XJSUJxxeBtw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597fb8941c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
172.67.173.113200 OK 2.6 kB URL GET HTTP/3 erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2624), with no line terminators
Hash ff4c29feda7e805fa2b689efdf355178
ad1d6d3e48fb9a19ce34d18fd6c22b19b9ea5756
12e747466a5ee2ebcc49ebf0696d383095bfe881bfc339283c24a3cdb039f509
GET /js/s-storageService.js.2dc48dda.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-a0c"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GW1l0yASxpQdGjX%2B501mveHhwImU5NIpqcWoUyvZPPpkK522M%2B6yPnvJvwZemDE6lX6ad86hIuC%2Ba332H1kl1r9HA7bqTGxYUjHSvfhNw3SzC1dOsqInJE57zcZlFgwYEpz48uQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e7f5d1c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync?userId=4aeefcd85e06e32aabdaaba1a588a2ca&partition=finance&duration=5184000
139.45.197.248200 OK 45 B URL GET HTTP/2 dortmark.net/sync?userId=4aeefcd85e06e32aabdaaba1a588a2ca&partition=finance&duration=5184000
IP 139.45.197.248:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectdortmark.net
Fingerprint2D:58:01:B8:69:29:6C:35:45:78:06:E6:15:E1:E3:B9:8B:47:F6:52
ValidityTue, 11 Apr 2023 11:46:30 GMT - Mon, 10 Jul 2023 11:46:29 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 784d3e480c1c3bd2f1b50b7bbb2c0808
eb308dc5812658bef879a63ec3da451808c8b3cd
adceac06c79b3ac3b81ee1db7e26746fdb80e77f0b3187b6778a2c88357324e6
GET /sync?userId=4aeefcd85e06e32aabdaaba1a588a2ca&partition=finance&duration=5184000 HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/json; charset=utf-8
content-length: 45
x-trace-id: b520c49e90ebe3a45517f1899e57ee49
access-control-allow-origin: https://erailsiwsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: finance_ID=4aeefcd85e06e32aabdaaba1a588a2ca; expires=Sun, 04 Jun 2023 13:58:50 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offpichuan.com/rotate?zz=4292518;4326645;5128285;4949467;5381241;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=5339054
139.45.197.237200 OK 4.6 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292518;4326645;5128285;4949467;5381241;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=5339054
IP 139.45.197.237:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
FingerprintDF:FD:C9:DF:54:1F:F8:D0:EB:70:9D:22:14:AB:31:A4:CA:18:1D:AE
ValidityThu, 30 Mar 2023 21:17:15 GMT - Wed, 28 Jun 2023 21:17:14 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4629), with no line terminators
Hash 543bac9cb5132d9dd36db50ef1947248
9f7529bf2bbf916a3ab36991944314b146ef83d1
08f77bc3d2def0a486e6ebc15f491cc31ebfd99d8123f0ed601b9c830b218069
GET /rotate?zz=4292518;4326645;5128285;4949467;5381241;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=5339054 HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/javascript
x-trace-id: d749e2a9d758178ce6808dc25db91b5a
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://erailsiwsurvey.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=9118e8d27d914ec59688aaeb0fed39f2; expires=Mon, 03 Jun 2024 12:58:50 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
erailsiwsurvey.top/css/survey.2bfeef83.css
172.67.173.113200 OK 67 kB URL GET HTTP/3 erailsiwsurvey.top/css/survey.2bfeef83.css
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6478a1ef-1041f"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7075
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P3rz1%2F3v64U1olRpxW3FfGF%2FOaypXVN9FY1fLCqDS9Iq8IZIYIm%2BrfBa3oswckxBava21ugFa7sKAfEaH3rXwX57i5kTb2wmt5L36SZJ%2BMZjen7reR6IRknCWzXpRdvq2eemin8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597edfd21c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-redux-toolkit.esm.js.b2bedd2f.js
172.67.173.113200 OK 11 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-redux-toolkit.esm.js.b2bedd2f.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (11317), with no line terminators
Hash ac9121dfc38a96f9146a7121ce322045
06ccd82f9b12b0e28763513da15d61fce4b9197b
2994e8f29a919a18deb772d218fe3fb77e45df892ae6512d448f8d862e2b3a71
GET /js/v-redux-toolkit.esm.js.b2bedd2f.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2c35"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SR9ZpXg10yJCD3vUT%2BEzNQLqiJG7Ew7qbn4rpd24e9hee7fjzDQr9ZbsEz%2BeltEVX8nJQtWctUzObOg%2F9NKpt1OoqSYYNoHjgSNL%2ByETaSS67kHNpBXwlJg6ss7OjenkhBmLMic%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e7f601c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_global-config-sd.2d740028.js
172.67.173.113200 OK 1.4 kB URL GET HTTP/3 erailsiwsurvey.top/js/_global-config-sd.2d740028.js
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (1432), with no line terminators
Hash 2534e90a7319b79c19d3a8339cd9fff8
c49339e6efca9603e9f8fc298369e00772237187
2220421642628bd706e44ff9cf8af6607787ea3cb839ea742af4fe11ee84d394
GET /js/_global-config-sd.2d740028.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:49 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-582"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 7074
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wSW6blusUPOMwdBpbwgEgrtjKLgCk%2BKhmP3vteG66ounRyxLiasdREcYT9pW%2BC3UT9rWdH9%2BGpS0wbgPKF9xUj6i5QOSQThaeQOej0retE1W5RNukustJyD83WkAggG7ruso3hw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20597e6f591c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
142.250.74.164200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP 142.250.74.164:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 2f8167a83a96c015814efbdcafa4ba64
10d0d3111342f2741856701a4403e31ee8f6d155
fb7de641340e1ef87fc299914f3a18ddbd745d01e1194103c3c948bd748cd858
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Sun, 04 Jun 2023 12:58:50 GMT
date: Sun, 04 Jun 2023 12:58:50 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/config/comments/en.json
172.67.173.113200 OK 4.5 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/comments/en.json
IP 172.67.173.113:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=ea9e6d10162b48a99e3ee8f60b017194&s=689207940961546423&z=3956710&var=5339054&testinapp=&autoexit_86400=3953544&utm_campaign=5339054&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type Unicode text, UTF-8 text, with very long lines (5176), with no line terminators
Hash 0f8a677240ca082b8875f3c8d3bf5c42
19641ee3e340098b44d1d248e7c1a99dd0daafdf
2f5cff997105c8b995ec55f36e2656e14e1676f23244471f6115bc1d04c821c1
GET /js/config/comments/en.json HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 12:58:50 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-11ad"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q55E98lrxigsqqSGKPYavRb2XJ8KJ%2FV9aSgOteGERBQdVryAWx3Pc0hKriwnrrSY9Et%2FsDqz%2F1PBahhEP%2FMHLW%2FNDwB3B6yzpg9UYMyNyvGErGYuX108vRU8P%2BCg20W9v7ewhGI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20598049121c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400