tausauptsurvey.top/css/_core-survey.3c68fa3a.css
200 OK 40 B URL GET HTTP/3 tausauptsurvey.top/css/_core-survey.3c68fa3a.css
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
Hash 22ba977e197d03c07033423879af439e
c4961539877966a91d559d729ea194646f1e2366
8aab52111a37350ec978dacea2b7ffc5acdac5fde4c7fdf4b2a943204af3efe1
GET /css/_core-survey.3c68fa3a.css HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: text/css
content-length: 40
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-28"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=64iHObHD6VZr1SQ%2BiEARNmvAP2BCYlp1jKE2Hn27wk9Ct00rHPUvIC2IkDq1qnRHPbsRdHsrj6W2lCoJSUgFX2ekOXIwZHe2RECvqs0HD5dftCzwB2sG7Pc%2B15qrO%2FdOqDP2hvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e122bbf5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/_global-config-sd.ca890aa7.js
200 OK 1.0 kB URL GET HTTP/3 tausauptsurvey.top/js/_global-config-sd.ca890aa7.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (1864), with no line terminators
Hash a82d6db31bbc3fe84f393353c1b02a38
ec96f539ccf75ffed179bbfcef236d95b0577492
872d72453acb1662ee9cd3c46a6774491946fed48a53786e415745374809ef06
GET /js/_global-config-sd.ca890aa7.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-748"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nzjzWQGap1aFWIkni4UqsoBUycBG04tOrFp3t9woLoBLfeg99%2BJzu6OOrwtk4cuc%2FLsumX1Ho8HqzqhLFtgVqnTf9kSy7KtOoK9oC9UuvtAuw%2B9R8BVqfa3cXvlkYoqHOK17MWQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121ba75684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/v-index.mjs.c6b8f796.js
200 OK 14 kB URL GET HTTP/3 tausauptsurvey.top/js/v-index.mjs.c6b8f796.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (35191), with no line terminators
Hash a7f1a1f90ba847a9df1cf8f820bb0df2
4e7e1313164829dcfdf6da6f817f40244e02ffda
b661fc88bf689df1b62710ede388dd6a28f5aafa7a4537d7768a490dc47bb271
GET /js/v-index.mjs.c6b8f796.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-8977"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5OHLp9iBiGYdmRmHM2P4IR2saG3Txm7WteCLWFyr4z%2FDdamOuPFbBAUXJY3r760GbIZ6Rb4NfGziK754Tkqot%2B0FEvJ4Yw8OXg72JCTjanhVHVn4pdI%2F2nllYl%2Bnc3yo3h%2B3nLo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121bb65684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/_is-browser-supported.e5c37b85.js
200 OK 1.8 kB URL GET HTTP/3 tausauptsurvey.top/js/_is-browser-supported.e5c37b85.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (3813), with no line terminators
Hash afdd7eb5f6ccce7e9b4b8398af13d3b0
2bf191ddc9bc6ff04e06f21be78eaf0539c9eeeb
b1b78c8a226b3bfe23b88e111a16749bd69ea46ed751431b6b9536f0e0770449
GET /js/_is-browser-supported.e5c37b85.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-ee5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XGM3kCAcyJRrYTbqdn%2FacK56hIw7PE3HGF30jrThRjSdGdq9Jv637SlJRNmL%2Fp%2Fj32vWj7B69q%2FSTT7FSEVjFk6UFZgiV10BWLsc6wic7SW8FFKFbW%2FfOZrZfhigTLICXXR8DEU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121ba45684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-do
200 OK 0 B IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-length: 0
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tausauptsurvey.top/favicon.ico
200 OK 690 B URL GET HTTP/3 tausauptsurvey.top/favicon.ico
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: image/x-icon
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WEzcgrzXeiGn%2B0JHmyxnj0LIhLbU2J37NtxKPS20Shlqu%2B81SgJ12sQwlQ9jQQww4bypL37ASdcJam0dbars1HsV1MA8AIx1dv6nDoOYfWk76L8ujqShfcEsx1zfPbKQJzA5Ozo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e155db15684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-do
200 OK 179 B IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: a4c515fba540f62780a5ca114449c336
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tausauptsurvey.top/img/comments/person-14.webp
200 OK 1.7 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-14.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
GET /img/comments/person-14.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1672
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X7wK%2FI0w%2FbaAUazrMI3uf9BWzsDiXXK5iI38%2BNLqGaoT7CVyq%2FJ5Ot4hz4t29ctvN%2FHWWMDT8aQ7%2FJECBpK7jnCIIcdZkh0zdCrTH3vQ2h%2BcDoH86DuLOqxqWvRvy4HCpUeey%2BI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e174ed35684-OSL
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 182
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 48cf51e9669001234be2984fcd034ee5
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tausauptsurvey.top/img/comments/person-6.webp
200 OK 1.9 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-6.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4
GET /img/comments/person-6.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1854
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b2hBX0NisXB0M9uBICni3q4ajpmF07jHyh5D6tbJsenl8yj2hcQXregU4nY1dgjWwF8jAHqF3AzHSizJ48049etvXTeAhDVb7ABWAvpr9Hc4BAd4MYyvwpOF6iDhq4fV7Ke5ePU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e175ede5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-3.webp
200 OK 982 B URL GET HTTP/3 tausauptsurvey.top/img/comments/person-3.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
GET /img/comments/person-3.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 982
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QXbBni%2BrV%2FUuTH8JQSi09b8rANxyXurFDUPGy%2BX1Jn9Z2qJEVidY%2Fz0aq6QVNunb93zi4MoOAAFjmyRvk1wfX1eMh6lXcsBaWYKOLG5aHdSAJARoeqqWM%2BRTBTDLW0sQhm470D4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e176eec5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-2.webp
200 OK 1.1 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-2.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
GET /img/comments/person-2.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1104
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7eU6mB55EFrRP3cbgYviGOGzEHyf3SdGMo%2FTM5mV68cEsZY45HqxLFxVBgNyk%2FYlTiT9OiMSDv2C70QCGkbnh%2Bd3y44oktZC%2BcG%2BLtnpya6wDLd6AVhODnGYPgY7hEDPPbF5CB0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e174ed45684-OSL
alt-svc: h3=":443"; ma=86400
laugoust.com/zone?&pub=0&zone_id=6163205&is_mobile=false&domain=tausauptsurvey.top&var=4806642&ymid=&var_3=null&var_4=null&dsig=&action=prerequest
200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=6163205&is_mobile=false&domain=tausauptsurvey.top&var=4806642&ymid=&var_3=null&var_4=null&dsig=&action=prerequest
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint4C:A3:DB:F6:1D:A2:D6:78:AD:0C:8D:D6:4F:CC:11:8D:EF:D5:AB:B9
ValiditySat, 26 Aug 2023 05:13:11 GMT - Fri, 24 Nov 2023 05:13:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=6163205&is_mobile=false&domain=tausauptsurvey.top&var=4806642&ymid=&var_3=null&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-length: 0
x-trace-id: 63b4e04668c520e7e92d614dc86e287c
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
tausauptsurvey.top/js/s-storageService.js.c2d14bf0.js
200 OK 3.2 kB URL GET HTTP/3 tausauptsurvey.top/js/s-storageService.js.c2d14bf0.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (2572), with no line terminators
Hash 24b5b5534c271e0bd7603072a42239c3
b05967409e784e229dbe632be42d4c26344a5650
9907afe3e4f311f87e058007d3c0e3a590ea9dc4887d9cbf81ceb95ac875ad0e
GET /js/s-storageService.js.c2d14bf0.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-a0c"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nrE%2BUTGnI4UTKd%2BaXZYBfFo5qWuxxzLerertiEz56%2B5gKFe82FbSpMq0skzzJDIJa0GkY82VOsbHuJyh9aYDIv6GHGn5XLrWh9OOIkGhIU8HSKK09dG1EIdQQ%2BEgc1d2BjGy92Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121bab5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-10.webp
200 OK 2.2 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-10.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332
GET /img/comments/person-10.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 2222
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8L8WJQbyJhTVHuF4vlIa1q%2FIztkzAabJLfkvFcBo1MYp6l3t3isT3wFyV0h8SCO7TD4XqmO2oJ7ywZF6Cc%2Bf2%2BDnv2O%2Bnp4UKhTOLIm0nY1jpV3pFdcoN9K7H5YHoap50zF70XM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e176ef05684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-9.webp
200 OK 1.7 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-9.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
GET /img/comments/person-9.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1654
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EhlJbSc8%2BUetURooyjNi0OWhD0%2FNj7vpgpcFYfna43WZ5CIWrAcfX%2BdanDxAgQa0JfzgkprdMns9R8EeqWWaZCgHAK3GjXTyrhf42QszEzaljdspwuczneb8L9kShMZygmh1RhE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e176eee5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-5.webp
200 OK 1.8 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-5.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
GET /img/comments/person-5.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1846
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=R%2FoL6lxe5tR%2F%2BRbX5lQ%2B%2FQITCrUEJfHYyV1FLC6lXfVrUVZoNbf1iQ028pylXJA13IY46Nqw6VAoFAaHkcqXzi3g4ETJHFU50FcO21YocG%2BJ7SeG6%2FlR8HCJjmZrHYkbhxRpgwU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e175edb5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-4.webp
200 OK 1.4 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-4.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
GET /img/comments/person-4.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1356
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AzqIey1a54F1WMD5JlzGe0LkeRxhU%2BAU2bgjIit8m0aOHIcCGLQ7HifjtP3vEeTtmAeP884gqZA5Hx8trL0hnAxptAvwzzn1QUpAoAcpPB8fyl1CCGJLSNEd7dVzFwn7Nf4sW2I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e174ed95684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-8.webp
200 OK 1.8 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-8.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d
GET /img/comments/person-8.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1802
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=je2VoqNhHcwmT4cBj8DTHxRq9bkIk6X63ksT8iFlm9FsVFh%2FzOabvpAML8RrbNtivvIKJCwBDlPwSYbVr1PNgna2juqcMzLVU%2FLcs0ExF7y00aHA8SFKl9pAYkBgBofRW6jlF7o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e175edf5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-11.webp
200 OK 1.5 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-11.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
GET /img/comments/person-11.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1526
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=j%2Fp0bjNlIpzAvOX9%2BQVqEYu%2FlSg63S9031jjwxakKC7Vj0p8Ktcyda5pBx2exCROVK8D4TQH8MSbdN6VLtDv2AQ7kj%2BG3qxjfUYgzQj2iiZNMKR6ZzkLsE5J0EnCTlIL9ametqY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e178f115684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-12.webp
200 OK 1.4 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-12.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e
GET /img/comments/person-12.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true; prefetchAd_6207678=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1390
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mcy40hKce6s0%2F4u1EChSxHq%2BIsJMpEGsu2GI%2BfevHfBTxVNyKoyn0UOp%2B0KY8oRFVQup8zQlKTE3CNqqyFZH%2FR1yW7%2F4%2FrAoHnEcmXWFTjfNoHhGehRgvFaM8S2Une5OpcuF154%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e17cf2b5684-OSL
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 68
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: a374e45284f5fa79d37a540e1aefc8b1
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
200 OK 186 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintAB:14:67:80:B6:91:41:34:54:E4:AE:2E:71:65:B4:8E:65:B2:D2:2D
ValidityMon, 14 Aug 2023 08:22:45 GMT - Mon, 06 Nov 2023 08:22:44 GMT
File type ASCII text, with very long lines (552)
Size 186 kB (185696 bytes)
Hash e2fe3524ee9bc3801e88f30301fde700
ecdb5bdcebbbaad69868ea78033be35ac9b20a58
a36746585bd5af117aff1cfeec39c2a810d6d9c601ca083d132786abf09d01b1
GET /recaptcha/releases/uEf7E1417z6GNSkRx7AyL8K8/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 185696
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 02:25:36 GMT
expires: Thu, 19 Sep 2024 02:25:36 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Sep 2023 18:47:28 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 9162
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1462
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 20 Sep 2023 04:58:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://tausauptsurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 69
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: ad509ee1445076566defd7027d4a5d24
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
43 B URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:32 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
offpichuan.com/rotate?zz=4292525;4326647;5128285;4949467;5381242;5381316;5381339;5381332;5381307;5381330&var=4806642&uid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
200 OK 4.5 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292525;4326647;5128285;4949467;5381242;5381316;5381339;5381332;5381307;5381330&var=4806642&uid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4577), with no line terminators
Hash 585d008ba38b3f0acd50a488ef9f9a36
7cf49a120bcf8bd3d2f9a26a6be4ef86cee2d12c
592a3ea94766f1039b4a30fea03b3efcdc51a347786ec2f3fd1ddd1c34a9b35a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?zz=4292525;4326647;5128285;4949467;5381242;5381316;5381339;5381332;5381307;5381330&var=4806642&uid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:19 GMT
content-type: application/javascript
x-trace-id: 671272c62da72e0637f6af1aa7f505cc
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
vary: Origin
access-control-allow-origin: https://tausauptsurvey.top
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:19 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
tausauptsurvey.top/pfe/current/micro.tag.min.js?z=6163205&sw=/sw/sw6163205.js&var=4806642&var_3=null&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
200 OK 27 kB URL GET HTTP/3 tausauptsurvey.top/pfe/current/micro.tag.min.js?z=6163205&sw=/sw/sw6163205.js&var=4806642&var_3=null&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (26946), with no line terminators
Hash c4c761125651e4efaebea8986cfa7d2c
576d06df4b5da15d218ee3ee081cc8a808369e07
5e7c10f10f6c51e3c356a601e33f8102d1ad17a9b24734542f691fceb73a6b9a
GET /pfe/current/micro.tag.min.js?z=6163205&sw=/sw/sw6163205.js&var=4806642&var_3=null&var_4=null&ymid=&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-6942"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BepJYHg040UzurT9GisfjPeEwXAP9NmqsyOktf2%2BayjN%2FTWCeP5JH6bqOcRxBvxbHipTRsfybi98aJVW4BMiuPdwGAlcRwZ9rts05QlA3UDb3JqYFoGk0oVVEYgeM3Zl8Ko2I8c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e158dd45684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/rhd?rb=RspYGifYM575mAoQ-Ord5M8bkJeFq1Dy5J13ZTfHKzZly01jLWwqD9xTTGCSaJdcPVRmgMTUSey_TYsP3Go00LrDWb7nsmFDcL7DW_wYPOIs8PaqdHJD6HrtDsmwag_uOrz-7r8toERoxPAg_KoAWRoN4EADhPccLvgCHX_Yl_6MTrRs3I3ZYfyJvvd1dvbVLCAk9QajoyI%3D&request_ab2=150013&var_3=&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Ftausauptsurvey.top%2Ffinance-survey.html%3Fz%3D4806642%26offer_id%3D2025%26var%3D%26ymid%3Dw5bpqr0ajmh1fknri0m71j3c%26utm_medium%3D4806642%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top&m=link
200 OK 3.2 kB URL GET HTTP/3 tausauptsurvey.top/rhd?rb=RspYGifYM575mAoQ-Ord5M8bkJeFq1Dy5J13ZTfHKzZly01jLWwqD9xTTGCSaJdcPVRmgMTUSey_TYsP3Go00LrDWb7nsmFDcL7DW_wYPOIs8PaqdHJD6HrtDsmwag_uOrz-7r8toERoxPAg_KoAWRoN4EADhPccLvgCHX_Yl_6MTrRs3I3ZYfyJvvd1dvbVLCAk9QajoyI%3D&request_ab2=150013&var_3=&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Ftausauptsurvey.top%2Ffinance-survey.html%3Fz%3D4806642%26offer_id%3D2025%26var%3D%26ymid%3Dw5bpqr0ajmh1fknri0m71j3c%26utm_medium%3D4806642%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top&m=link
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3217), with no line terminators
Hash 825ba056224d5681549b7ea9ce0db52f
cd9eb91bf0ab18488d78ce043eac01ce6ce4513c
754eb34dea47e21b184b902af30522159a5020782e5886184c0bb0f4e68db1fd
GET /rhd?rb=RspYGifYM575mAoQ-Ord5M8bkJeFq1Dy5J13ZTfHKzZly01jLWwqD9xTTGCSaJdcPVRmgMTUSey_TYsP3Go00LrDWb7nsmFDcL7DW_wYPOIs8PaqdHJD6HrtDsmwag_uOrz-7r8toERoxPAg_KoAWRoN4EADhPccLvgCHX_Yl_6MTrRs3I3ZYfyJvvd1dvbVLCAk9QajoyI%3D&request_ab2=150013&var_3=&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Ftausauptsurvey.top%2Ffinance-survey.html%3Fz%3D4806642%26offer_id%3D2025%26var%3D%26ymid%3Dw5bpqr0ajmh1fknri0m71j3c%26utm_medium%3D4806642%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top&m=link HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185898; syncedCookie=true; prefetchAd_6207678=true; prefetchAd_4292573=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: de4d6ed934082a98adddf2bd6249a2a5
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:18 GMT; path=/; secure; SameSite=None
oaidts=1695185898; expires=Thu, 19 Sep 2024 04:58:18 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 04:58:18 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dxr6Owt9HqVMSq7lpv4nf9Jc2P1ZADIWEUlMw7waXLMmca3R7ki7Lt34Xb9%2BA84gd4LC1D38%2FJ1s7Ts2mffsaKlEvZRNQ3SlSehRIOFKtW6ObyYkMnddTBAqo2H2Iz37cM%2Fbapg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e1a888a5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/comments/person-1.webp
200 OK 1.1 kB URL GET HTTP/3 tausauptsurvey.top/img/comments/person-1.webp
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
GET /img/comments/person-1.webp HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: image/webp
content-length: 1122
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: "650996d6-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wIXfysjB0V1PgPdmz3cbyPFKRRJ8rWc2oKA%2FW4yG0c2gM30nMNERFkErjxW0sTic2AU4FtOmD49RJL2r%2FntmCh4JNoxwiqm6YrWzOXDTP%2FY2iJ3TERsJcviJgam0pKxUNGrHHKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e174ecf5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/v-redux-toolkit.esm.js.86d657a2.js
200 OK 11 kB URL GET HTTP/3 tausauptsurvey.top/js/v-redux-toolkit.esm.js.86d657a2.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (11315), with no line terminators
Hash a4fe018340af9bd999c47690bff0c0a3
5c64261d732ab851676fb5480733bc7a3a9f8a9d
26608974055030ac39ff50090c78dd6d4ab237908716255f07c064a0ef4ab6d2
GET /js/v-redux-toolkit.esm.js.86d657a2.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-2c33"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nt5VjsN%2BT7ot13QjnBBhaPm%2BpKsk89my04X8%2FqsjubdrleuKmNqo1DtH7H0%2BKYHH7wZP5vJvqVMh8OlFvrpDdG00ny%2B19ZU7CoY4aWP25HUo6YTX5sQCYLccRcwm%2FXPbIIO2I04%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121bad5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/rhd?rb=vTpjG3lJDtVC_N09yymsMs4BlLj4LcSZyKiu5kq7vhGZUUTnbIg4u1hDyEiktRG6i_O9ndsKSqpJBtwTfxbcz3cT8N0N6x_N7cdWAlLzahKmxQKJNcZqeBYvghrjFCOhgQ3rtSUdelq4E_xMAZo6y8RY4pBNYq0OubtCkZOxdHtMw38IAmbZC_1XWNwz9FB6SYdJ-_fX-5A%3D&request_ab2=150013&var_3=&var_4=&zoneid=6207678&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Ftausauptsurvey.top%2Ffinance-survey.html%3Fz%3D4806642%26offer_id%3D2025%26var%3D%26ymid%3Dw5bpqr0ajmh1fknri0m71j3c%26utm_medium%3D4806642%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top&m=link
200 OK 1.8 kB URL GET HTTP/3 tausauptsurvey.top/rhd?rb=vTpjG3lJDtVC_N09yymsMs4BlLj4LcSZyKiu5kq7vhGZUUTnbIg4u1hDyEiktRG6i_O9ndsKSqpJBtwTfxbcz3cT8N0N6x_N7cdWAlLzahKmxQKJNcZqeBYvghrjFCOhgQ3rtSUdelq4E_xMAZo6y8RY4pBNYq0OubtCkZOxdHtMw38IAmbZC_1XWNwz9FB6SYdJ-_fX-5A%3D&request_ab2=150013&var_3=&var_4=&zoneid=6207678&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Ftausauptsurvey.top%2Ffinance-survey.html%3Fz%3D4806642%26offer_id%3D2025%26var%3D%26ymid%3Dw5bpqr0ajmh1fknri0m71j3c%26utm_medium%3D4806642%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top&m=link
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1834), with no line terminators
Hash a2819dab6ac1ead559cbe6b7d1216ae6
ecebf5093704a08c9996bd7ff681a7d5ef525332
d702d76162aba068f49d6eef76888a690728ecd6541b16270bc8aa11e1d95f28
GET /rhd?rb=vTpjG3lJDtVC_N09yymsMs4BlLj4LcSZyKiu5kq7vhGZUUTnbIg4u1hDyEiktRG6i_O9ndsKSqpJBtwTfxbcz3cT8N0N6x_N7cdWAlLzahKmxQKJNcZqeBYvghrjFCOhgQ3rtSUdelq4E_xMAZo6y8RY4pBNYq0OubtCkZOxdHtMw38IAmbZC_1XWNwz9FB6SYdJ-_fX-5A%3D&request_ab2=150013&var_3=&var_4=&zoneid=6207678&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Ftausauptsurvey.top%2Ffinance-survey.html%3Fz%3D4806642%26offer_id%3D2025%26var%3D%26ymid%3Dw5bpqr0ajmh1fknri0m71j3c%26utm_medium%3D4806642%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top&m=link HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185897; syncedCookie=true; prefetchAd_6207678=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 899e7303a49c113a040c346024dfc9f9
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:18 GMT; path=/; secure; SameSite=None
oaidts=1695185898; expires=Thu, 19 Sep 2024 04:58:18 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 04:58:18 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L3E83kRhK%2F1yuAu5MewSwFn8eiL2APfcKz7ATJ2IbWvXZ6ikAVqVwZAEd74thf%2BLrPcBi1ojizXk8LNsJ0SOG2xKkZfJlDRz%2FQvREwKxR%2BRIjFyVgifCh%2B%2BYakNfEW1wjRV1sb0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e183f605684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
200 OK 5.6 kB URL User Request GET HTTP/2 tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (5797), with no line terminators
Hash 97870cf20532f8fc5bef6ba114b4d263
3adbfcd7619bbced62e46026f42210252600a1f7
918b076b40e7e873b12706fc178d735bf62fc4334b210854e041408973a43cdb
GET /finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 04:58:16 GMT
content-type: text/html
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PE9GMLYTE%2B%2BFBpRymhkJkKiDCOjKG5VC6QZPeElNgEcuJSuux6ijrIgVQ0K8gEdHS%2BUprGXU928gP2nduS%2BlfLgPEY7Pw6w0MI57owSiI1DmNUPLvuV6%2FU1E1FCvMsxopqFECA4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e0f5b11b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
200 OK 19 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (18335)
Hash 8ec0c661780569e42736cfc20e4c69d7
0d857c9b9813975179cf323a344c934bcae598c6
38831e62c2e99f2f64b0352f13ef7daaa7c97e31dac314bb52caa89a6a7f58f5
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/javascript
last-modified: Thu, 07 Sep 2023 08:19:46 GMT
etag: W/"64f987a2-4a29"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 942
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HZXjkjEFeHGFItJjIWLJNB8YnNMOKK6J2ppIXtNM7NEKUbQP3bEZzAiCX92B02izc6xy38l6KxN3kCdTcbHY27EHyG19FQX2Mhtpdv%2BGf%2FCHKz2KdI96ZIRAsSynXNGgxA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 80977e188dc0569d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
tausauptsurvey.top/js/_prefetcher.d6d66ea5.js
200 OK 2.4 kB URL GET HTTP/3 tausauptsurvey.top/js/_prefetcher.d6d66ea5.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (2484), with no line terminators
Hash d8081d6f211de7348b84bed51d3e7a38
560663a3284ecfbddb6c8f6e20d1e0ba01d7d835
035b1173e3f59b87a7157c4027d8fe8a616880d7b79788a6c4a98fd9b8b2e962
GET /js/_prefetcher.d6d66ea5.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-96e"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7iVqYRnzrU%2F8wfKNBmSqgRM9%2F7w4%2BoDTpD0nZQJ%2Fzm3H5Kk4PYjg4v%2FsZ9dGfmlqcljBX%2FxrV5EBRErZ%2F0Z0x8xhKozDFSWQc6ikq%2Frr%2FA%2BpT3pe0AhFtgxeGIKbiHEIfmhk0cw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121ba85684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/survey.9ba0d360.js
200 OK 6.1 kB URL GET HTTP/3 tausauptsurvey.top/js/survey.9ba0d360.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (6242), with no line terminators
Hash 37adeaae8f0cf0b534f484154530d0c0
e577158dc0db84eb32922789ebe0027d87e8fbdd
5db3cd6c79946dba45a40d78feb36eca4f41c3c72911e8d0d4eac1f5976b8457
GET /js/survey.9ba0d360.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-17a8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zTreAGtQNKN6uSUbeyRhjOi%2Fg8tus1oH9rPTPLZUaRX7Eg0Tx3dtFAEXiKwY34xRC8lGUuC77zGOLwkI08WNyYg7CX5FkIZ9dtFH5xjS019gXjTs%2BXJAxDTg%2FIXniDQWLqdlq4Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e122bbd5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint46:10:6A:3E:F0:E9:34:E0:79:83:32:6E:2E:D8:2A:57:15:BD:AC:4C
ValidityMon, 14 Aug 2023 08:23:03 GMT - Mon, 06 Nov 2023 08:23:02 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 645cd6634a9669f2b068dbef1be646a0
de9dc91e6daede1d27cec2a2a6aeff03b782b4c6
70a12392169d94b68992cde2d6d35122f73e4c9cd3ed1f3d223dcceaf9da08f4
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Wed, 20 Sep 2023 04:58:17 GMT
date: Wed, 20 Sep 2023 04:58:17 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 558
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tausauptsurvey.top/5/6207678/?abt_opts=1&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top
200 OK 2.8 kB URL GET HTTP/3 tausauptsurvey.top/5/6207678/?abt_opts=1&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3018), with no line terminators
Hash 48718bc95c51f3f7b438189af8bdee0e
48dd145adaff7d310a79bece8affa8a967bd668c
39d26124134271ab1c35f2602649083801f1f6a10b3b3a257850fd4d447c9441
GET /5/6207678/?abt_opts=1&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 40088055b664be5e3d7f088fbd2ff89a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:17 GMT; path=/; secure; SameSite=None
oaidts=1695185897; expires=Thu, 19 Sep 2024 04:58:17 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 04:58:17 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7MQ%2Fm9GSerCZXC7NLLD42v7AviZlZtw0bQnlYPHii4OWRhCmTrV0%2FmW6v49L4CqI%2FQ%2FInTXVEE2Aqm2XxtRfeFxV8ai5yQqy2eJ%2BILKh8MPi9vzKxM4NOy6EDN3l5dRecXyng54%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e15ddf05684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/sw/sw6163205.js?var=4806642&var_3=null&var_4=null&ab2_ttl=5184000000
200 OK 1.3 kB URL GET HTTP/3 tausauptsurvey.top/sw/sw6163205.js?var=4806642&var_3=null&var_4=null&ab2_ttl=5184000000
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash 12ceb3417aac1a7588d9b314a6d8a947
53350202f247cb936fd820b7633105224396ff53
3c7e8dd01cb0f13eaab3c91158cb31623af7776c39a2b8e3da8df6c442b6f670
GET /sw/sw6163205.js?var=4806642&var_3=null&var_4=null&ab2_ttl=5184000000 HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185898; syncedCookie=true; prefetchAd_6207678=true; prefetchAd_4292573=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FeF70o7CskBmOXFxDdS44kM%2FMBqGFFyjDeI49C5DiRp29vnxg5NPyW1YIpWMip3st5lzqpJ70y%2Fzq8CeR3v2t6PDZw5JYTChTGituBfcO25Zih2tXuTYahmdS%2F0%2B9%2FFbTOr6fu8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e1b18d05684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/v-immer.esm.mjs.775845da.js
200 OK 10 kB URL GET HTTP/3 tausauptsurvey.top/js/v-immer.esm.mjs.775845da.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (10497), with no line terminators
Hash a9b55caad0866134c730f46bb9ed3a6d
d9341ec11cd3e427871deeb1260e5b74dfbb44dc
c85b6ebe2e815c85c04f96491b0d74e99f31388d8a507bcd1593f2ccd303373e
GET /js/v-immer.esm.mjs.775845da.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-2901"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=erB4yycCHqJFFXrRKsDgFx3iP7HNOqxwOtdgtcrU4EUyzXHR1PyDqcliYaElQV3U0qhaa5VwIM6NPv2oxmRDyNRgLs%2ByYEGXfh%2FoVsfeNsGy7il2Y6P2sqt8iiH4dVQ%2FKCIWNHs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121bae5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/config/comments/en.json
200 OK 4.5 kB URL GET HTTP/3 tausauptsurvey.top/js/config/comments/en.json
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type Unicode text, UTF-8 text, with very long lines (5173), with no line terminators
Hash 50680109e350a76b2bb8131cdaeb735e
0c14dde15f13c0deefd1ff3eb8c4608e73d133b6
a9ebf6b7ceb48bd6c63b99320183934f2b183af64cc7f27fd85ebe7191d92e42
GET /js/config/comments/en.json HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/json
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2ZyCRmzv4cliheCcFJKCXF6KLHq%2BRSLjeuC%2B%2FwEW%2FuhdCyNdopGYUAnhB%2FxDR4Jo9kBLXyjNMvsLvCv9%2BEFZA0mEhGb8870aNLTyvLV39E6bnckB%2BB%2F%2BjtQpVn0cAucrkZ90CS8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e15bde45684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/_each-land-config.55456aef.js
200 OK 73 kB URL GET HTTP/3 tausauptsurvey.top/js/_each-land-config.55456aef.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 0659c7e1ef2cf3ac5cfa7dca585be96f
f414c1ede0fcafb7a4f656955e958c78e27d842b
eab0f7db0e4581057d4a7eadfd5630dab661ec933bc800c5cba592d912b47f3d
GET /js/_each-land-config.55456aef.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=72713
etag: W/"650996d5-11c09"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1BgiIHwCZogewgQOr2EoenuZtUpQ4cBb%2BYpT9rYne1hVsiF5A708wR5bBA4G7%2FAqF1x2KExt6eWx3REBfmPRWfArHNY28K45QPx2rweVAsjDbrENeR3roeMjTpifm2UnY7PL1tY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121bb15684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/_rtc.5d12e065.js
200 OK 11 kB URL GET HTTP/3 tausauptsurvey.top/js/_rtc.5d12e065.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash c6bd49904cc559c9bc68a03432ad510b
b89b3d9fc51068205d1af84136dd4f29591c23b8
d34dbd1f5646dad2b509951f30c0f475ed4ee59e40ced9825762c279619bc539
GET /js/_rtc.5d12e065.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d5-2bb5"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xiU398AQ0aL63h1HyCpv01pcXsS3lKSmICdYoXGqaSUq%2F05JUP00LFqbwhvqJipvKGb%2BNrSTQwje4NWvjG4lOcbf9UJ6O0zvUYSWGvidY9z2UWwhFw8rxgSpS1TkGM23mnTgc1Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121ba95684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/config/data/sd-2025-en.js?v=10
200 OK 2.7 kB URL GET HTTP/3 tausauptsurvey.top/js/config/data/sd-2025-en.js?v=10
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (2856), with no line terminators
Hash 6c2e62061cdebe9e9e9c34c6b68da4e4
9c909d9f24497a3e9fcc2ac598ff95ddeab631bd
e25d0e7e5ce511f03704109dec7dd916ab41eb486bfa215cdfd3996c128865ba
GET /js/config/data/sd-2025-en.js?v=10 HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-ab3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BPGESrxB2N%2Btm8FjXiMRCwmoOfDX56jfBfdcyi2Npn9AnE44trN6eFRFMijyRbEJbuh05%2BuvhK7u%2FbPXTlVfPDGa4bX2fLMxXgOLrpTvdf42iLz8lSRLSQFCt15M7%2FSu7jlYYKI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e13acad5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=xdgrnxbq07sdnk6cwur82j9q0h8bzlax
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintB4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1
ValidityTue, 25 Jul 2023 06:29:27 GMT - Mon, 23 Oct 2023 06:29:26 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash cef37f0413e056d8fd515a2c58f64ae6
9283934fda123fd83262ff6a9c635e11e7115b47
aa31ea3f17317e5eefdd60ebe49f20f4a03a496f25146cc6f7e83f1dd771600b
GET /gid.js?userId=xdgrnxbq07sdnk6cwur82j9q0h8bzlax HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tausauptsurvey.top/scripts/prefetcher.js
200 OK 11 kB URL GET HTTP/3 tausauptsurvey.top/scripts/prefetcher.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (10761), with no line terminators
Hash b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
GET /scripts/prefetcher.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"650996d6-2a09"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FNDUALWR6B%2FAfTDVYUmx%2FrISbelyqNbMw6AmEqRDCtSQeNPzER9%2B6Q%2BFHCTouMgDutDmBb7kG8vwUHeV4qHFOKZClCpS3WtcCxgM4po6D51CGmcHYbmOQCLFM98mK49wfaGwSnI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e139ca85684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/_core-survey.03bfbbcd.js
200 OK 227 kB URL GET HTTP/3 tausauptsurvey.top/js/_core-survey.03bfbbcd.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
Size 227 kB (227162 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.03bfbbcd.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=227165
etag: W/"650996d5-3775d"
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HiwucQi%2BisVNP9mpjO0JGh4LyAoxnSz7PZm6sXljQr8YShfqDz8I3OzDC5SUAolNnBZe095taZpkaOvwnwUhznsxRbeCJFL%2BkhrgCpm9GDso2JhglepA48SerJ9zKKpDBC4UXZ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e122bb95684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/config/data/sd-2025.js
200 OK 9.3 kB URL GET HTTP/3 tausauptsurvey.top/js/config/data/sd-2025.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (9591), with no line terminators
Hash f76392636f99eb86aa66f5fcc662420f
63f146ad559b72c6f83f20077a6ed7362d2b1f71
5a05bf0e426f0d470ac2e5b2fa1be767b0582a1631f806ad508d0e53b11c4739
GET /js/config/data/sd-2025.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-243b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ncYtNygbQ6aNZqy0yl9SDKUckkLjY01bS0uu3Fp509yd4iAtPOEDASLiSlZiBmeJHAppXB%2FjYWojstkGHYWd1etIEo57ECPXtxbSbBsYe3nVSJbJX1uAjpYXaZYGtCJ8xOtUgnU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e147d385684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/v-index.js.36b291ca.js
200 OK 41 kB URL GET HTTP/3 tausauptsurvey.top/js/v-index.js.36b291ca.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (40879), with no line terminators
Hash 1946258710afc5f07ad8dc1ac8546efb
b5b0e50a053c368f3ae65fddf9fe072e4ceefab4
c7cff67c9f67a2d76980471f7e48a8ae8725757c21c0546a26ad97100b554f8f
GET /js/v-index.js.36b291ca.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=40882
etag: W/"650996d6-9fb2"
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YDLKOqvlca4Xd3OHym%2FBptdD6%2BvWO%2FzCcTWpEGDh0CEEJGkkzbxKKbyEe37UvPaTUV2B2o7qzXWZKHuyNyT0pvNi5I1m1BlpQNhLgsXlATZTVhuwjAqhQ0oZTRE3gbqAPnglyI4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e121baa5684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/img/icon-survey.svg
200 OK 2.7 kB URL GET HTTP/3 tausauptsurvey.top/img/icon-survey.svg
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2690), with no line terminators
Hash a000ba4d0e7570d810feafb22bc50bef
af8fce44a683d3dfebe69cbe856e747739c9a666
9ae848c180201d8ae5c59ce118b0b7ef395a01295fb04d57e81cfe0566100679
GET /img/icon-survey.svg HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: image/svg+xml
last-modified: Tue, 19 Sep 2023 12:40:54 GMT
vary: Accept-Encoding
etag: W/"650996d6-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hcwCPgc8ih4N8RBaARZGUY%2FyuDv%2BsTsKfI6DIrce2EkEC5Fv0koDJftLohzPIXvv5nZzcqfok3FOslpxbWPFX1LObUN3RC%2FHpKmCKLlJl%2FW9ogHTHwlKkH%2FWCmdZDORzbQ0B0v8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e123bc95684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
offpichuan.com/track?offer_id=2025&z=4806642&variable2=w5bpqr0ajmh1fknri0m71j3c
200 OK 166 B URL GET HTTP/2 offpichuan.com/track?offer_id=2025&z=4806642&variable2=w5bpqr0ajmh1fknri0m71j3c
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash f09d6c46e03cc0e1f83b9bcaa27f5cd3
9b37c4cacb359bcb54c9d12365c64a969d77c095
add9b154aaad6a50ada6ef6a624eafa09c63ea73b5e3c834557c6f3b54744525
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /track?offer_id=2025&z=4806642&variable2=w5bpqr0ajmh1fknri0m71j3c HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://tausauptsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json
content-length: 166
x-trace-id: 11c23be06fcee47369292ad8fd3a2bed
access-control-allow-origin: https://tausauptsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
tausauptsurvey.top/5/4292573/?abt_opts=1&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top
200 OK 2.8 kB URL GET HTTP/3 tausauptsurvey.top/5/4292573/?abt_opts=1&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3018), with no line terminators
Hash 69bbb5fce6c8a736a069cff8ec80a4d6
08695eea37f4f2e2b3cbcbf716a70cb02850ee33
e65afa1fe47553404dbdfa4c0d7bb623d6eaac1e0e7269560c91ac06b8991613
GET /5/4292573/?abt_opts=1&rhd=1&var=4806642&var_3=&var_4=&ymid=&s=&ab2r=&os_version=&oaid=xdgrnxbq07sdnk6cwur82j9q0h8bzlax&domain_onclick=https%3A%2F%2Ftausauptsurvey.top HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; oaidts=1695185898; syncedCookie=true; prefetchAd_6207678=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:18 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 3703e1fc705d3ed59ddc8fde054547f2
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=xdgrnxbq07sdnk6cwur82j9q0h8bzlax; expires=Thu, 19 Sep 2024 04:58:18 GMT; path=/; secure; SameSite=None
oaidts=1695185898; expires=Thu, 19 Sep 2024 04:58:18 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Wed, 27 Sep 2023 04:58:18 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nxef%2BU2T2tv9oWKBuTxCHOsp53LMQBZr69aaw5BxUgE3sPjwEjTr4FdJvkhf9jKidG3z72L1Qn8crVOjnDQ%2FIoYsNZayz3%2BNBEXjAWaxUgdBjdQLG7%2BXlCbv9YHoT19VjFSLMpk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e1a185a5684-OSL
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/v-react-dom.production.min.js.d40305c2.js
200 OK 129 kB URL GET HTTP/3 tausauptsurvey.top/js/v-react-dom.production.min.js.d40305c2.js
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (65440)
Size 129 kB (129354 bytes)
Hash 9938d713f71ff2ca89f854d6408f8cee
d00521d6cdb756b1e7838eb8244dcb4a96577ed9
5edd9f705cec174e31477531a0fa4014beb53238c80f36da1c38132648cdc599
GET /js/v-react-dom.production.min.js.d40305c2.js HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/javascript
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-1f94a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PGIJlmTGaXihGQYr%2BQFgs8Gpxw7cGxVcnd%2BjNGQxxy605fAu6%2FNcz7jrCSksnEHkWBcj4Nhd%2BVkAEYUbMnHuFo0KLIFzq3VM%2FfATlWCw9abBCIrxFc6ArP9UMraPiSP%2FUouMGk4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e122bb75684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/js/config/dict/cookie-consent-1.json?v=10
200 OK 6.8 kB URL GET HTTP/3 tausauptsurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: application/json
last-modified: Tue, 19 Sep 2023 12:40:53 GMT
vary: Accept-Encoding
etag: W/"650996d5-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zRE3zQ%2B%2F3J2LfYLtQzMzo9OK1Tc46aL3O7ty1i%2FaqTQrzHsP9vnFY0BSyei1gNf%2FcOtjinvn7xwKCsCL%2B%2BGteWELQlFrY2t9L5FZlqv7zqWpPoYKLiAy93ss8fhSQaoeZW7bOTM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e140ce25684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
tausauptsurvey.top/css/survey.9a31db7e.css
200 OK 67 kB URL GET HTTP/3 tausauptsurvey.top/css/survey.9a31db7e.css
IP
Requested by https://tausauptsurvey.top/finance-survey.html?z=4806642&offer_id=2025&var=&ymid=w5bpqr0ajmh1fknri0m71j3c
Certificate IssuerGoogle Trust Services LLC
Subjecttausauptsurvey.top
FingerprintCD:CD:EC:07:12:38:7A:A0:BE:18:5B:7B:8A:14:64:20:87:03:F3:D4
ValiditySat, 29 Jul 2023 12:59:54 GMT - Fri, 27 Oct 2023 12:59:53 GMT
File type ASCII text, with very long lines (35420)
Hash b4d5fd17923c6816d61298601e374ba3
098678509d900f44e19f4c7afcc1a44b0b9f1425
ec38e36294681976811de557f5d3a65e47697e62a9533dba1e26c456131f2526
GET /css/survey.9a31db7e.css HTTP/1.1
Host: tausauptsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 20 Sep 2023 04:58:17 GMT
content-type: text/css
last-modified: Tue, 19 Sep 2023 12:40:55 GMT
vary: Accept-Encoding
etag: W/"650996d7-10609"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VwR8G7QzTOCFZDPa1a5qyJFFscKiooNdd5WzXFaMfH5EiEAsRUsoqobJo%2BnuaQNH1eRyruS4yf6ylyyAcRfhi4NYvYni5FbmCL9MF%2Btrkk5Vtzts3y8tOKGcBIUCdMT%2Fya3o3OU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 80977e122bc05684-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
172.67.161.62
188.114.96.1
139.45.197.250