{"report_id":"df99bb66-af4d-4a3a-963d-a5e471b3bc23","version":6,"status":"done","tags":[],"date":"2024-02-12T12:58:33Z","url":{"schema":"http","addr":"33.mbvnclickpush1.site/","fqdn":"33.mbvnclickpush1.site","domain":"mbvnclickpush1.site","tld":"site"},"ip":{"addr":"94.130.64.156","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc\u0026utm_campaign=2256\u0026utm_medium=6070194\u0026utm_content=zd_public_v2","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"title":"Would You Make A Great Career Online And Become A Millionaire By 2024?"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-10-26T00:25:56Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"my.rtmark.net","ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2014-10-29","domain_rank":9054,"first_seen":"2015-02-04 10:54:57","last_seen":"2024-02-12 05:09:09","alert_count":0,"request_count":1,"received_data":749,"sent_data":433,"comment":"","tags":null,"fingerprints":null},{"fqdn":"33.mbvnclickpush1.site","ip":{"addr":"94.130.64.156","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2023-08-10","domain_rank":0,"first_seen":"2024-01-18 15:39:04","last_seen":"2024-02-11 12:41:03","alert_count":0,"request_count":1,"received_data":251,"sent_data":477,"comment":"","tags":null,"fingerprints":null},{"fqdn":"leadhits.media-412.com","ip":{"addr":"35.204.70.16","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2019-02-26","domain_rank":0,"first_seen":"2023-07-10 15:35:59","last_seen":"2024-02-12 08:40:13","alert_count":0,"request_count":2,"received_data":753,"sent_data":1040,"comment":"","tags":null,"fingerprints":null},{"fqdn":"offpichuan.com","ip":{"addr":"139.45.197.237","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2023-03-30","domain_rank":0,"first_seen":"2023-03-31 02:39:15","last_seen":"2024-02-12 08:00:48","alert_count":2,"request_count":2,"received_data":16328,"sent_data":1023,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2016-07-26 11:37:06","last_seen":"2024-02-12 06:39:59","alert_count":0,"request_count":1,"received_data":200394,"sent_data":448,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.google.com","ip":{"addr":"216.58.211.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":7,"first_seen":"2015-05-10 13:11:19","last_seen":"2024-02-12 07:50:50","alert_count":0,"request_count":1,"received_data":1331,"sent_data":394,"comment":"","tags":null,"fingerprints":null},{"fqdn":"googrootsurvey.top","ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-06-28","domain_rank":0,"first_seen":"2023-06-28 12:04:52","last_seen":"2024-02-12 08:40:13","alert_count":0,"request_count":52,"received_data":814888,"sent_data":24376,"comment":"","tags":null,"fingerprints":null},{"fqdn":"arleavannya.com","ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-01-22","domain_rank":0,"first_seen":"2024-01-22 21:55:05","last_seen":"2024-02-12 05:09:14","alert_count":9,"request_count":9,"received_data":6064,"sent_data":4326,"comment":"","tags":null,"fingerprints":null},{"fqdn":"datatechonert.com","ip":{"addr":"37.48.68.71","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2021-12-24","domain_rank":46154,"first_seen":"2021-12-24 17:44:17","last_seen":"2024-02-12 08:00:49","alert_count":1,"request_count":1,"received_data":486,"sent_data":542,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ofklefkian.com","ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"domain_registered":"2024-01-25","domain_rank":0,"first_seen":"2024-01-25 13:57:54","last_seen":"2024-02-12 08:00:48","alert_count":1,"request_count":1,"received_data":386,"sent_data":499,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"mnemonic_dns","type":"domain","description":"mnemonic secure dns","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"offpichuan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"datatechonert.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"offpichuan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"ofklefkian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2a09c62ade9bdbd73d5b821d7eb7224a","sha1":"c6a062a7229c27cc653a472936a4233f53378601","sha256":"7b6f6684bffd8b9b04937cd8fa05b0e46e6b92f65b8695df8dd4265e52b8cd55","sha512":"10481d70df0c58e918eae0694c577a63a9b23e8c4a235f9f54a0eaf81309824cd19b909d509fc35f5355e42ae8d343818ab489fc1c4620d7d412d42afba33194","ssdeep":"","tlshash":"b7c02b8210048c6770a1504a5f53730271234ac484407141204588327188b4b8b250df","size":135,"data":"","first_seen":"2023-11-23T13:28:57Z","last_seen":"2024-10-28T13:21:07.950644Z","times_seen":22536,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-react-dom.production.min.js.82e7d04b.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1a6ba4ec06bc62522664dd2c3322806a","sha1":"de585cfceb5edc6cfae839f27d994341b295e02d","sha256":"b00befad2af4cae1d45592f2771d21fc3ea2bc33146f8b3863fee997a8fad108","sha512":"eeb2f4c1b86813c360de65c04f5d4d201f6f949e72499f6aa89190f2068f90233be0a0636dce6a82d196bda451c0e8395b3b4920238e9d47a5caa404bfd67c56","ssdeep":"1536:rNvNER2WFUKulz0FiykoMa8gRPrV1ILRJUT8qHc8:rNlZeWXKR8LReQ8","tlshash":"a0c307e83d96e6526ab712a700ef1813733c291b280c4d60a615fd8e74b841bb17bfdd","size":129356,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.332757Z","times_seen":67,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/config/sd/sd-9540-en.js?v=10","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ab509e5faf8beaa7205e4d2852e5eca","sha1":"c35e95ed5b6bb71a5cdf0eb2e349fae42685dac1","sha256":"6a3ff31d913496a3eee3a8e0d9a544ba3399dde26b393187e24d33c27d2c63be","sha512":"7341297bfa557ecb132b51c9be7c6e0f161d645156fdfbb697044f9a615871f85cef969a9838cf2be5cb40fbe95f6a9243ce44e5e972dafead8bb9bae13fa95b","ssdeep":"192:Ihqyi/p47P9y/RARERtRnRARvrouFBF42+Awvh6:WqyMo9kRARERtRnRARvrokBC2+Aa0","tlshash":"fb0246d5bc55a02a17f7711c7e9f532f7a08b209ba4e58fc399cc16617a54f2cfa5200","size":7963,"data":"","first_seen":"2024-01-25T17:30:45Z","last_seen":"2024-08-20T11:06:35.024258Z","times_seen":443,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/x5WWoE57Fv0d6ATKsLDIAKnt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca50556eed6c3ec820e1e84b8b8c4c89","sha1":"94b412b047930720ea1cf6e26279821859f6a666","sha256":"5aa02ad9ec4550065de8002ea1108be5d10bbb1173d2f3447f88ce1af317d4bd","sha512":"acf6180697b349825c18ec7372c894a455c44683a72c7416fe2abee46873a585bdba99b0167dbe77bca6582928de4f01a41a79899f61f5b30e3974b8c159e1b8","ssdeep":"6144:o2upgm9JdG0ukPIPQCUhS1PeLGIBmQ9qh90y5KQy9o66+U7nlIlg:kgIJdrubH1WVBmbz0y5ENq","tlshash":"7ab4e7dd704675b28322b2f5a067285aa27e56a4e84c0c5ef195c8f13fb084db076fb7","size":501379,"data":"","first_seen":"2024-02-08T08:46:24Z","last_seen":"2025-11-30T12:28:45.871451Z","times_seen":901,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-constants.js.19349cba.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0455c0a95ad62d73e6d4b9c3e1ab2ec5","sha1":"5fa06e00056d4361b4335fbcbc8b1c7ac7430d65","sha256":"886e1dcfe8c826cbb1683b268d86dc031f7c551d76e8c64918b3634514b45735","sha512":"f1c956594264a7717890b518f5c2443e490b1fdd3eee06e32ce9e34902dc7bd250e0d17ecfe2b5a3f4982f1c5c16488ae204d36d6dba4460c23133613e8cd596","ssdeep":"","tlshash":"9e01ac0af486c81a361a6f4823ba1f351d291111a905b09e3900c3ba915e83d169bfda","size":600,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.396315Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/rating.cda2cefa.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0dc0ab381765db0b390494eb7939d62","sha1":"a6cfcd8fc61a942f35ccb54de792c2eab646bce1","sha256":"6d6c818572e5b7b0ab3850a0e1ec81401dd2a9fc4097555561f723adc3623a88","sha512":"a9f3ea024971943458be8e18dea5fba433dde2866da4ea98302c17dde3845c2de4cfaa9445473c516facaa12ab1747eaae646954e1bba61e9b51ae3f5fea301a","ssdeep":"96:rvkRcXUTKCPA+IXNxIF4lE1F3qcShOrfyJXbR2vccJP:rvkaEuCPA9XNxIF7f0OrfEXtEccJP","tlshash":"4fb1208eb865e01c866bb06725ff1738be642b09fd68042495f4dc1cf4a6e885b34f2c","size":5309,"data":"","first_seen":"2024-02-11T15:54:53Z","last_seen":"2024-08-20T09:54:04.403055Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/_rtc.8634e228.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0eec32a72945a12dbff576ba23c7fcf","sha1":"a74b9b50117673d63563bc1f282550876badb934","sha256":"ca2aa7c20c51a36bdc6c807b86aa722a5a0ecb312f1fcca97567dc5b63641eb7","sha512":"e92a37a53e0a295755a44a2ad3988faec9fe43293080981421008bc8990bc4dcc70c5a6532855d64bc39e6652e8e013927894524b84cbd8fab470df25cae03e0","ssdeep":"192:vMwRVI+QaN+5hLoMlGc+KdKJgtMxzT8IFh6fzM/fy0FRfSV7ZA9f2bE:vnI+jMnqgtMxEInyaaKaVFg","tlshash":"1642c6ae22f8cd068735081dd3c3446367d8d3de860e14a5e9b826816ad2bfc470f9f6","size":12222,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.386951Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/_each-land-config.2585c54c.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7aeac02c3c0282e729d544e7cbcb0ab5","sha1":"db56aeb84c9ebc3d27c6d9d5feccfeeb8f126ee3","sha256":"e7621fac5eea193280e9763009d9204668333e340c0b865f6a490d3ef324ddb3","sha512":"b4e3fe31fb00267dd43dad003ea8aa294ac4f3fd0a0df4e09bcaf22679ff3512c3face06156439989ad0b29da6744694a9735dd8bf144cbd030d73b30cfd8051","ssdeep":"768:waxFgYynzCneXrkjjtQwt1h0OHMjjtQwt1h+6pux2eXzpcfaEsE8tcW3qz3LbP7Q:waxFgatLpHCtLGjJqfafF5+LXaYjY3","tlshash":"8263b78c7685f0a902f76179452f6317f23a6a66644dd050e212e8e07cb8d8fc527fee","size":71717,"data":"","first_seen":"2024-02-11T15:54:39Z","last_seen":"2024-08-20T09:54:04.2594Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/_core-survey.6514d33f.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a671efac5f0a588bafbe550ba5d9c3cd","sha1":"048ba0cc4bbdc242c5f4e0c8b3a33af7e9a2c939","sha256":"abf69548e81b83c6fb84919c18bea75a6565e7acaa495b30fe284571f2f1a937","sha512":"c932f25b1977e9ee997e6cb7373e86bb2e83d7412ad649944c01fda7024636fe0c3d12535087cc479e2029b2c2b67d363a7eb8dde456fcd0b8eebbebff63d4ec","ssdeep":"1536:+vnqgDjCKLxGqiTAtFd4qkSYxHzhWZoqiSAtFcnMmzH2yofXs/FMAt/HxrLid0KS:Yq6CKd+UtcDDmzH0yxnFSe","tlshash":"02f3d6ccb6d2f06602b72179413f620bf37a2955686d9414a216dce0bcb8e8f9237f5d","size":168750,"data":"","first_seen":"2024-02-12T10:59:30Z","last_seen":"2024-08-20T09:51:04.858948Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-possibleStandardNamesOptimized.js.52c34469.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bada58389b4c86b37622cb5d0574686d","sha1":"5d1e7c1ea18494f7b59a1a79bcfeb6250b4bf336","sha256":"28e5526c8b3677ed45f277ab99524b8efc980f079adcd02e432cdce58df01bf4","sha512":"dcac9a89023848a1a506793731526ad0aa92643d5a46cf16f414dca74f3157c057629d686545ae8dbc2c090a6de8c3aeb19ee3f1b8797c2076ac2a45e22b569b","ssdeep":"192:AkIo9Boy02VPTUcdL9qP1zVWn3m0NUx2Ah/FCPGB++04:AkI+oY9TviP1zVWnBNUMAh/IPB4","tlshash":"6ef1a529f904dca6a413c15fb6fa2e0f98185992bd0239d5c78cc42ca2e953c235ffd6","size":7577,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.399728Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5ee784a5e8a628c1ed418bacc1ad97f1","sha1":"1e52d9f80748a7ef45996ef017105fb1a460b4e8","sha256":"98e76358940a26e8f3c8ea67c7b42b20d4dec18ec9cca3b184049b798cfa2270","sha512":"e7c121e217b928682133877145c359acddaac88bf6509e744b2a42846692dff0e00f1979d3a3d46074c2cdbf2eb42df7470e7becb102abb76839b67a7512dda8","ssdeep":"","tlshash":"df31da4b63c682e815d117fdb37f12e83df6ccc37545a390ad026848a46294ef494c8f","size":1721,"data":"","first_seen":"2024-02-11T15:54:39Z","last_seen":"2024-08-20T09:54:04.397238Z","times_seen":716,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/survey.4bfdfa3a.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ad50d7aa19700ca9c56b9aca325af76a","sha1":"df451eb193dafb7697a0fa81aed3b9061c574d16","sha256":"259da12adf06ddec65517625ea562f4ec5d43d5892593b78c6928533a7daa352","sha512":"09f0dd9040f498d179cdc359564a270cdb0133f52c61d058aa7b3bc274b44f09a7cd8026417780a4556c60188f4d2f011ac148bed0c80ccc0a78276930a0f530","ssdeep":"192:8b3kQO7OODS9UXFsyAzBEiaJx+j/a9cIKUJktLNRVAkRvIBZvokzw8Fk74:G0ObGXG7BEiaJQokFXVAkRvIBhe6kk","tlshash":"62e1839cbb08d4750aa2281e6a7ffb69753120167409ec00b05ed41cff38f9b9657e96","size":6667,"data":"","first_seen":"2024-02-07T03:56:59Z","last_seen":"2024-08-20T10:05:45.074553Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-dom-to-react.js.a72e65f9.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e13f07debe9b31d44b54584eb186c187","sha1":"7d1f4fb095aaecd9d305d0a52d79e8c0e101494c","sha256":"5000afdbed4c104ef6d8d97169f82a5a6abac8e901c146732188cbfe005962bc","sha512":"ea7cd75585e078c180183d29d54cf0e657b8b73648812b1913a733a944c58d34e0ff9efaab379770bd07a2f43de8f83cf4c0bf5ed5e0dbff6e4a8802b6939456","ssdeep":"","tlshash":"9711638430c4ba9e7ddb48c515f7742fb2fe581cda1449925310c0a68728de0269fbdc","size":1085,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.395113Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/pfe/current/stattag.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a74216e872211a9c770302bb7d4a63f","sha1":"7e63556174a7d66eee407218e503ec0aae2c0f9e","sha256":"03405209d89a927b81d53eb13968663069760776389c5400bb79d11bd9f78f78","sha512":"a65668e0749eba0255a7a72e04e128de1c8f4e86ba7e0cb31a2b6ad7a85f064208f50308dcafe15df07af68229987de02c1d2ecb51db9c3a65b6b8ea9cdb36fc","ssdeep":"384:VYXwc44eBbfKuxEHWEr1XdK2LWqHUeNpyE0kA0tl:4w4iKxVrRNWZKdA8","tlshash":"9782754db589d563ba6231a526ff2509aeeeb5710f2f6c49c2386cd039b92cbd103dc4","size":19053,"data":"","first_seen":"2024-01-17T11:23:44Z","last_seen":"2024-10-26T20:44:51.317412Z","times_seen":3714,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/s-checkSessionStorageAvailable.ts.034e8a5d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cc9d601e15c1a10f2c02fc1a20d5c54d","sha1":"4c8e6af51052fb670396f87e4d6738107c2778c6","sha256":"6eede942cb64806dba748b556be803bebe13b1e732c7ff152a5d0d5d710ecc58","sha512":"e14bca487f391aff4351b1c794afa5c9233d444e0b9e5f2e213c29e8bd6b0f58725a45f6f31f53cd0fdbd7c77165b2456073c538f3b599619aaff28ab3699c63","ssdeep":"","tlshash":"98e0c009b0c13e183533817822a667267f3f00a03b2c50f3892680443d08c4a8337bdd","size":330,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.398968Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-utilities.js.896d234d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"22fa067be7e939a5a33663c4811c6ac4","sha1":"68e09730e6995cba9114963bbf5053105bf8ed3a","sha256":"acf5b18e9e9affa2bf51c8d607f9f9a72e7fd0df20bd1b890025cfdd5e38e4ba","sha512":"a20a1418ea863c896698e5bab4b1c99400f88f32f00dba91ec3dfaa716e0468c5d7a8fe21c589b1b36b9d8272d3c807c3820bffed1284a304fc2fc74b7ef6e5f","ssdeep":"","tlshash":"c651c699b0c5f98627ab5ca511bf382ea3bd0850241c4d70a114c8fbacb0abd0277fdc","size":2577,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.401966Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-html-to-dom.js.0b382f98.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ac8f25209641fd23590049763c01123a","sha1":"9c4abe5eb8d2ecd7c4e1166db12ea8d0ec315e08","sha256":"6ba4050cca6d7feb115fc42bdeaa507f961799bc0bbf26bf6ceb1aea7cfd0773","sha512":"773b734b458f80df5550e9658f30735893188ebe3affffcc60241f37c1056850e263812e38cd32a2c5fe2504465ddf3f3dbdf0b6c293ec436d38f8b4e8044bfa","ssdeep":"","tlshash":"08e06acd30c03cdc3e23344010e4d4023d4d30a73e1440f3c79252b8ac3c5591004f84","size":364,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.400349Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/SurveyContainer.eee0c501.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ee0c2c6954a7863293c05d1e3e32726","sha1":"cff71ec620431ee0b63b051a4a769ca51e8cbb80","sha256":"054074bf6fa33c788c45ed5007ba27d5ed4693ac3bb9a3bd003accdcc5e693fb","sha512":"2e14fae894bc2c960437d7f08e9c49384cf9ebc942e125af8b9b96345e19a137f5d52d6db25f6c739c19518c19985e9feeba802cb03874416370d4030d491aa7","ssdeep":"1536:h1Fp+sBmHUHa472ioHZrfhjahR54ROMOUhWk:JaOgzhj2Ru","tlshash":"c443f788f991f06942f7246e613f4207f3b02659a2add450b121dce4bdb8d4fa53bf1a","size":56658,"data":"","first_seen":"2024-02-12T10:59:29Z","last_seen":"2024-08-20T09:51:04.821668Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/s-checkLocalStorageAvailable.ts.e518196a.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0bd138b96903c8aaf92368ba7e6e817","sha1":"069156ab9e0df0622900fb781a3309fdb1f4894b","sha256":"eda0f40501654b949c57fcb0d809ff8598abd5801f57a53318f261892bc9dc48","sha512":"b6576422858cf617dda4f963a0d43ac076bbb6e4f3e39aa747f299261d12a51e7b6d1dd251bce9cb33d2b3cb66894b8af0a8b109f3484afdc46243a03556e2fa","ssdeep":"","tlshash":"8fe0df4a70c37b04366211ea229a6726ef3d01e1ae2c91a2691205443c5999e836aede","size":330,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.351676Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-domparser.js.c4db68d5.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c57096ad1b2043897bd09133272b045","sha1":"a79d2211ca2f6a659aa62cfffaf07a59c9eb8740","sha256":"e3f128a760e406fa0d77c5ca9e896c2fde9a7d5fbe2ffeaf7e13e8bbf8b19d14","sha512":"c2297757f27ac3b8fd10fed7a904869f34b69340d67db7944955317878cf53ffe3b8049c40603ef24de034d86a5cfeeffe95f250cab9f2a932da30864ebf5c84","ssdeep":"","tlshash":"f631025c7086b1312a6b117f623fb22fb93105757e941060b218c87878b489943abfe9","size":1720,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.394563Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ffea2723a1d9f1a86f0753aea0a43927","sha1":"ec44214dc3251e832da8bbd4c5da4074c46e62fb","sha256":"bdef8bbbb41f6d668649d54fac38ea135b8af8ac67a9fda7366c28c753e56efb","sha512":"86362d9a26205617ed30928a1f212aeeec229d593b277296b82dd63c0aebbce8b19bca4c039516be66010b7a73da634c10d0beddbbcc7d9535b8bdf11c632430","ssdeep":"","tlshash":"6a011e987675eb28069037569633fbb936b7512a1480c150144ccd0c2c27e6fae199cc","size":807,"data":"","first_seen":"2024-02-12T10:59:14Z","last_seen":"2024-08-20T09:51:04.864849Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/s-storageService.js.2a07b5da.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6607e9abab001795abe5dc7165c98948","sha1":"2002d2e98a5dbb3f7c264f533e9b6f83919489b0","sha256":"04697ac28832825aa6fb3ddb543889a50b1d1c10bef84dca7393022134b69267","sha512":"ec78cf63140c6ddca74f8bb00bfcf565630337ebe451519c7cb1b0c10ec2b02b83f2ffe4a4f1f9808cd181d82432e5c5355154de13da28c7dedf83666cf84ded","ssdeep":"","tlshash":"bb4101c83281b43654eae06e615f3506733d1494742dd0287056cca07eadd6e8773fba","size":2170,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.330086Z","times_seen":92,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-index.mjs.4e8a04d0.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c026a07b4d38c32fbc781479ad6a12","sha1":"24a137767f69b3313b10dd83e4a6a2eb2eff54b1","sha256":"0248ebc73f99ea485ea6b809f2a574e91527016decfb8f8a96b28819201467b0","sha512":"947e48e087c97171003cba2e7dcbdc7095897ece80ed8963006c0aa8e7e36163d8c77257c588f9f86ad56112dfc4f0d3a44fb498fa57e4c152832ede4e198cb4","ssdeep":"384:DkX1PJUZR3UCaCPMCzadYhKdAxC7dQ0QdQh1uvdAvINJnVCqGqm:QJAuCaC0CziiSOGTsEoFnVCP","tlshash":"1cf28488b291f4b242d7a166803f450bf279685570ae9090f336d8e1acf95df8177f3a","size":35287,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.389264Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e503c461b1cb739c9d72a2e459c0dd92","sha1":"32f0bb696243f1017ce1007c1e2d398b59bb6aed","sha256":"e4c85b7cafb55916cefb68a5fd608c9c5d7cec1e29f526fdbc8ea68ff07f3a02","sha512":"dc825e2deac419933105b3a10bf3446058bfcbd9a530b9f440b1b59a0a200c88783054919d03256f9a647489150102453652fb5e0c41c2940b67f73eba8905be","ssdeep":"","tlshash":"d641a1ae7290a19323f76011d07f3b012377026b3e74c888925980e42e20e6ec3fa75e","size":2155,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.400893Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-index.js.f858a42c.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5076b890500d5104cfceaea7962e9e9a","sha1":"9a8cd4cc37f5ccb0864c889d43a24035f314d0a5","sha256":"39d2e9f3c001253e0b419f27647ae70d2cd1ff39c99e3e8408667f97ece002d1","sha512":"901fed03c2d8acc88a4d8f6408c89b4ddb167c810ba582a7a289b32bda8c06b4e5e0162ef4ce2af6908d4c0367d88aa53ddac2f1047fa612218d624502c6f956","ssdeep":"768:+T0aFjqyhdC8WDkY32rGCqaiupWZV4G0htgYSUyPi2u0LnC5Fel9DDV:+zkyhdC8EPupW4GOtgp7j0Y5","tlshash":"6c03d68db9a1f4a603b764a5806f000ff27d6429644e90a4f6f1e4e5bcbc15e9223f3d","size":40985,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.363741Z","times_seen":77,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-redux-toolkit.esm.js.b9840c6d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb7e172a4e94b8503d6c8e9753e6200","sha1":"435a2eb8e4bde051ac5e7405be4556b50c33ad4c","sha256":"67de1922c9275ee52177c86bc298725db162738807f05781c0ed701892037181","sha512":"0b6ce95da378f03e42700c1bc45d84485c00e02e90a2da19a77082bf748f27367cea7b28da5e32d92593777c1ed355a3a4f91d81947188167055f047539b4e5b","ssdeep":"192:Dkbv5YpZYoaU30sakQbM00qFTANRvJGmxtvp2u2luMTvVix3rUhLNdnKOv:DkbOpZyU30saXNZoG+vp29lTv+wZNpKW","tlshash":"6332a4d9b5c1f0b1936779a4803f241bf23a7966784d84609212d8f27cf664fc22bf69","size":11319,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.381846Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-node.js.6e9d7d4d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2a70a4d2e14dd97f738c3f920c59631c","sha1":"f8a8065de42fb5b20c9e85477b54e81e88a52b68","sha256":"7c07e9b1638fe2ed71e457e32fae76a43bb06ec56f1bc5365ebf495811635cc1","sha512":"ccab3a708b2312ce1aea80875d6c6f3263d2f1e970463172e6f51fdbcdc4880e2274ebd51b13599095785752e7098b5a54b06ef3c2a8175b0897327f221a1af8","ssdeep":"96:rvkMJqoQCe7/VFgEChfcI72J49lM5t91cthszusEsbhLfb:rvkMKCengEmf2wY1G2uB0ZD","tlshash":"7cd101ca75e0faa206b36598406f211ef33e3c5e405851b8f691d5e2bc30959825bf7e","size":6251,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.393986Z","times_seen":90,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit\u0026hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.211.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"78c8be896bc1f2c1f00ad563f61a0eaf","sha1":"0fc5501d1a5c12ac214303ec929ac7bc650645dc","sha256":"0b5fd874139a6b35b0b7b5fad1e5e40d47d415c8d876555eb8a666103491adb2","sha512":"23ebb412b9967a673212f02e1cd916b0da7a582967e8e9c50946288f2189dea05fe833914727e54b4907e1b31dcff7cf88d9c2e38ab36cde9e1f8b1917c6bd66","ssdeep":"","tlshash":"10015ef62500f0350eb319b2e0fbcfa0f0126028e41c88e4aa1ade841e6dccbce04905","size":852,"data":"","first_seen":"2024-02-09T03:45:08Z","last_seen":"2024-08-20T09:59:30.060376Z","times_seen":98,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1c21f8c6a7c78b7e67c5272c65c97f91","sha1":"1a2eb15ee36a8f8b7160358a304ccf575b571074","sha256":"0af800d9d96b01d9183737d36c4e01792913fdcd393bc56727f1e9be39730fc2","sha512":"791cacd9eb3e0ce221a5d57c159c588d1e634c3bd503889da7da83666f1bef8f1d5b0929a3f4743c42d7fdf687445c7ce55a4300a451925eae7323628c48b80d","ssdeep":"","tlshash":"23b012040a645e76f41c10852138c3fdbb7230b13401a030100dcd0c8440c41863c800","size":96,"data":"","first_seen":"2023-10-08T13:44:02Z","last_seen":"2024-10-28T13:21:07.961634Z","times_seen":27089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d9b48d49f88bc3e71b52a408295effa","sha1":"ca122790003cf5d50f71165ed81d120d8a91199e","sha256":"e7427cfeefd59822deeb50274e744da9ce4173ab34ba825aff2d79f1dbc7be76","sha512":"be278cd91ee94f9b1e58004e39733f3f896f7410753927d8ed91448999df688807cb51980766fb811b2a9ede2c300ec21d313b5edfaa467b6d61f0f842f49912","ssdeep":"","tlshash":"abd05b669011d67d03a201c7d56efa94a871404b1800e4e0b945c54bda5ce5f0e17754","size":250,"data":"","first_seen":"2023-04-11T14:49:40Z","last_seen":"2024-10-28T13:21:07.962692Z","times_seen":26231,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/pfe/current/micro.tag.min.js?z=6679100\u0026sw=/sw/sw6679100.js\u0026var=6070194\u0026var_3=null\u0026var_4=null\u0026ymid=2256\u0026cdn=1\u0026domain=ofklefkian.com\u0026ab2_ttl=5184000000","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"75c26ccd65e96e912725399ff3ce66e9","sha1":"d300939979d2048844dc5ac80c51ed8121126f4e","sha256":"c9db5c92934b273ad485c58710d6fbc2d580c2923a99bb456b18cb5e1465f5cf","sha512":"c1eaed428bfdee457d560cd1587f552c84c42a46f9543266f9db41172b0ebf8404922b4138fdf345bea49df99c064e29664c131aceda539a686940cebd78b040","ssdeep":"768:4wLA93uYOAihN2lHY/dAAlTBHmQeTM7f3/LWm0GllZKKBR5:p5lllEKoqlZdv","tlshash":"eec2f9de75dd64a5f6c62645403a13c4fc7eb222bf2f9c81981e2d5b25133c28ab2ed4","size":27174,"data":"","first_seen":"2024-01-17T10:52:24Z","last_seen":"2024-10-26T20:44:51.323929Z","times_seen":3178,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-attributes-to-props.js.83ec2bf9.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ce63d627b7465c103cf9fe658bd3adf","sha1":"09400f74ec575fe906e233248d61e7550850e222","sha256":"fc40a094c3ce0f09d57a8b1275be0fdb79b378fa4672a504dd4f9e0a3061d863","sha512":"3c617848a81909133f56ab45db660f76d45211df21e0e367c2e2b3b1ed11c161c92f99d042480ee0b45174fd46487463c73d3c21e3296033d7fe183743c32d83","ssdeep":"","tlshash":"7d0144787ac978b22b2e04e670970d259c4c4011b41ec8dbde08c272ed0c926015bdac","size":702,"data":"","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.39565Z","times_seen":91,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"33.mbvnclickpush1.site/","fqdn":"33.mbvnclickpush1.site","domain":"mbvnclickpush1.site","tld":"site"},"ip":{"addr":"94.130.64.156","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-02-12T12:58:06.625Z","timestamp":1707742686625,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.ch.mbvnclickpush1.site","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 05 Feb 2024 07:47:43 GMT","end":"Sun, 05 May 2024 07:47:42 GMT"},"fingerprint":{"sha1":"5E:8B:98:0C:B5:2D:06:75:05:F2:E4:81:7F:45:06:48:33:94:C9:41","sha256":"F9:61:B3:42:46:F4:A4:4F:92:43:89:42:D4:BB:38:24:35:F6:F1:AB:A1:35:2B:19:D2:78:34:46:03:A6:E2:A6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 33.mbvnclickpush1.site\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nServer: nginx\r\nDate: Mon, 12 Feb 2024 12:58:06 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nLocation: https://leadhits.media-412.com/click?pid=2233\u0026offer_id=6142\u0026sub1={CLICK_ID}\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":468,"timings":{"blocked":200,"dns":38,"connect":36,"send":0,"wait":48,"receive":2,"ssl":140},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadhits.media-412.com/click?pid=2233\u0026offer_id=6142\u0026sub1={CLICK_ID}","fqdn":"leadhits.media-412.com","domain":"media-412.com","tld":"com"},"ip":{"addr":"35.204.70.16","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-02-12T12:58:06.895Z","timestamp":1707742686895,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.media-412.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sun, 09 Jul 2023 20:53:14 GMT","end":"Fri, 09 Aug 2024 20:53:14 GMT"},"fingerprint":{"sha1":"16:AB:3B:E7:5C:01:8D:17:4C:E5:2A:16:CE:5F:3B:FB:DE:12:ED:4C","sha256":"07:17:63:AC:CA:61:0C:31:F9:E1:F3:DE:8F:66:E6:03:C4:8B:C9:D5:BF:0A:D2:A8:6F:CD:81:F1:69:30:08:9C"}}},"request":{"raw":"GET /click?pid=2233\u0026offer_id=6142\u0026sub1={CLICK_ID} HTTP/1.1\r\nHost: leadhits.media-412.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:06 GMT\r\ncontent-length: 0\r\nlocation: https://leadhits.media-412.com/click?pid=2256\u0026offer_id=6167\r\nx-adjust-use-original-forwarded-for: 1\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":82,"dns":10,"connect":28,"send":0,"wait":31,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"leadhits.media-412.com/click?pid=2256\u0026offer_id=6167","fqdn":"leadhits.media-412.com","domain":"media-412.com","tld":"com"},"ip":{"addr":"35.204.70.16","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-02-12T12:58:07.014Z","timestamp":1707742687014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.media-412.com","organization":""},"issuer":{"commonName":"Go Daddy Secure Certificate Authority - G2","organization":"GoDaddy.com, Inc."},"validity":{"start":"Sun, 09 Jul 2023 20:53:14 GMT","end":"Fri, 09 Aug 2024 20:53:14 GMT"},"fingerprint":{"sha1":"16:AB:3B:E7:5C:01:8D:17:4C:E5:2A:16:CE:5F:3B:FB:DE:12:ED:4C","sha256":"07:17:63:AC:CA:61:0C:31:F9:E1:F3:DE:8F:66:E6:03:C4:8B:C9:D5:BF:0A:D2:A8:6F:CD:81:F1:69:30:08:9C"}}},"request":{"raw":"GET /click?pid=2256\u0026offer_id=6167 HTTP/1.1\r\nHost: leadhits.media-412.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-length: 0\r\nlocation: https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc\r\nx-adjust-use-original-forwarded-for: 1\r\nset-cookie: afclick=65ca15df8d67a40001bc98bc; expires=Tue, 11 Feb 2025 12:58:07 GMT; secure; SameSite=None\nafoffers={\"6167\":1707742687}; expires=Tue, 11 Feb 2025 12:58:07 GMT; secure; SameSite=None\r\naccess-control-allow-origin: *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/survey.4bfdfa3a.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.753Z","timestamp":1707742687753,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/survey.4bfdfa3a.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-1a0b\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=npu08501p3NnoxyfbJvzAINJa53dYin%2BHpoSZtJnBg9yuSg37VQW0e4TCc7o06GQkUsWxBWjcWoRBaorFGPSw%2BBqY695w9elNofwljMyU3tLS0G3Q%2BpWJtD0Oc6FgqeDJSnYQpM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500561e4e56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2625,"size_decoded":6667,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6667), with no line terminators","md5":"ad50d7aa19700ca9c56b9aca325af76a","sha1":"df451eb193dafb7697a0fa81aed3b9061c574d16","sha256":"259da12adf06ddec65517625ea562f4ec5d43d5892593b78c6928533a7daa352","sha512":"09f0dd9040f498d179cdc359564a270cdb0133f52c61d058aa7b3bc274b44f09a7cd8026417780a4556c60188f4d2f011ac148bed0c80ccc0a78276930a0f530","ssdeep":"192:8b3kQO7OODS9UXFsyAzBEiaJx+j/a9cIKUJktLNRVAkRvIBZvokzw8Fk74:G0ObGXG7BEiaJQokFXVAkRvIBhe6kk","tlshash":"62e1839cbb08d4750aa2281e6a7ffb69753120167409ec00b05ed41cff38f9b9657e96","first_seen":"2024-02-07T03:56:59Z","last_seen":"2024-08-20T10:05:45.074553Z","times_seen":129,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"OPTIONS /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-attributes-to-props.js.83ec2bf9.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.009Z","timestamp":1707742688009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-attributes-to-props.js.83ec2bf9.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-2be\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=SndeYH8HUtJbsg1QqbWm5Fgq7JkwS%2B360GuJ3XODvXapqeaNX8s2I0Ba2xAQ6GYZ3wKRoZKeqLHLK3MQedlQKHxHUl2ps2RHNNkKTI5m25aA%2BIqvpdDy3DE4Uy6Ij4968jCiBqU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057e90456c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":463,"size_decoded":702,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (702), with no line terminators","md5":"3ce63d627b7465c103cf9fe658bd3adf","sha1":"09400f74ec575fe906e233248d61e7550850e222","sha256":"fc40a094c3ce0f09d57a8b1275be0fdb79b378fa4672a504dd4f9e0a3061d863","sha512":"3c617848a81909133f56ab45db660f76d45211df21e0e367c2e2b3b1ed11c161c92f99d042480ee0b45174fd46487463c73d3c21e3296033d7fe183743c32d83","ssdeep":"","tlshash":"7d0144787ac978b22b2e04e670970d259c4c4011b41ec8dbde08c272ed0c926015bdac","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.39565Z","times_seen":91,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-02-12T12:58:07.059Z","timestamp":1707742687059,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: text/html\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=iDyzNKk%2BHL0HTUugEJm7LByFVBtbxxpDfTyEZy5X6gO64i4Ys6D7xXJwPBjZisSbSOIOcohnrnk3MZiF9SJw8MPV8wTfHYFwGNRiSegnZN9NKsYU3nEciJffdvr8DKXRh0%2BnoAY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005298f10b02-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4408,"size_decoded":8009,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (8009), with no line terminators","md5":"fa2046594dc02dd74a3efaca98b607df","sha1":"6d0bed71f6156dcf117cca76b8319656d73e6c87","sha256":"16ab8f03a0ea209af119f63b866a79f246b6f021347af44781e80b998da7957b","sha512":"fc529d166c4656fc20d8db585a995ff9d32e87dea4d2e96a5e4c98ca6e3ab465bbc9c7be20732381b95aa6303bb6247861db24c4be3a223b0f858ffc133fdf11","ssdeep":"192:6QvTlBGelOWnR8I5QzUCYWvtWNmHAAyiaF7dvCY3Yvc9b17yJak7ySsln:5LnGelOWn+I5iUCYWVGWY/VCmKI2J8n","tlshash":"aaf1d72ba9d1c2bd03e216ddf637b34c3af3c99a6e50c58065a800d81e95f8fc91598e","first_seen":"2024-02-12T10:59:14Z","last_seen":"2024-08-20T09:51:04.775858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":77,"dns":55,"connect":1,"send":0,"wait":81,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/unnamed.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.315Z","timestamp":1707742688315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/unnamed.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 264\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-108\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=jyB7ktybTrDuELVx2m1dRVnutarmycQ%2FqFRvAL5hG51PxWva2x0vuf8N19vIgSHx9EQHkAzP6UwdY8SOTPRU%2BG621xs9f9087B3KivKHMSdYPP17HxzKknv5dGc1t3R4Bh7nSz4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500598b9e56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":264,"size_decoded":264,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"606085e7a74fd169da34f9fcb43ad12d","sha1":"77226a50488fb48256d36f1810a136b69d635f74","sha256":"df20f4c1d87cb10514a6d526dde70759334705d90a909df0e6cb130061ce1ea5","sha512":"c86b56d3733b3c6c6e50c17629dc44438730d0ae1d75f4330683eeda0623a522ac9de55bc47b1353abe77c70c01650cfb142740e55e6e504cbd053a0fa85df3f","ssdeep":"","tlshash":"e7d02ba000babba5c141b3b19032449c38a90d02a9557a32618d24c10627454549b744","first_seen":"2023-10-13T09:13:52Z","last_seen":"2026-03-15T13:01:24.727734Z","times_seen":4194,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-14.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.334Z","timestamp":1707742688334,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-14.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1672\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e981-688\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=d4gStuYGp9k%2FBQkBAgz6r4%2F6NtJQeuHRNrkIAVhnk3nh9rx44Yo3PY%2F2vPw6JetQrSexP6YMuRvM0mbj5xeLWpPBcsT%2Fkw1%2FMV7pBvxbNbW5o179tUJpRX0GYMQqNevdXsUwyyw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059bbce56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1672,"size_decoded":1672,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"7dc8c2c56e77f2a329230f677b6e5bf8","sha1":"23b56b25ef6370e93d6c070c212684ba99612fcc","sha256":"49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc","sha512":"4de0c0bedb1cf4b6cd342f86f7c779ea08dbaab7ded9c042d74be288a125ddd2ff30d40794459e67e042822d4613d4c57b6348353867a685863300dfe8a27f41","ssdeep":"","tlshash":"0d311a55714a4ea7bc562eba272ab23f30f5a0dfc1462949760d1454c880816c3f9e9e","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.128135Z","times_seen":7700,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/s-checkLocalStorageAvailable.ts.e518196a.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.723Z","timestamp":1707742687723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/s-checkLocalStorageAvailable.ts.e518196a.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e980-14a\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6059\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=kiB%2FstkmqjEjXbfNTH%2FI0UF0ApENHQfl8weohlE5K9gpVIBKnyxGtcB3yNRus81BXXwsHeojpua3HhWdFcL8IWDvrRPFVyYco7qoPd1l0UM6V7jkawFsvnRJZOCvJXS1CLBm3P8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500560e3856c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1309,"size_decoded":330,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (330), with no line terminators","md5":"e0bd138b96903c8aaf92368ba7e6e817","sha1":"069156ab9e0df0622900fb781a3309fdb1f4894b","sha256":"eda0f40501654b949c57fcb0d809ff8598abd5801f57a53318f261892bc9dc48","sha512":"b6576422858cf617dda4f963a0d43ac076bbb6e4f3e39aa747f299261d12a51e7b6d1dd251bce9cb33d2b3cb66894b8af0a8b109f3484afdc46243a03556e2fa","ssdeep":"","tlshash":"8fe0df4a70c37b04366211ea229a6726ef3d01e1ae2c91a2691205443c5999e836aede","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.351676Z","times_seen":92,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 798\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nx-trace-id: fc77b25fb20a3d5e00653a104b22a5a9\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17,"size_decoded":17,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b64e8b89092b2e3dfd448b10700627f","sha1":"484b3032619fa1acd135d114565b0a5166281c22","sha256":"f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4","sha512":"61c86d8f7c4c3e60739191712080650f22caa78427e5bf9215ebc16ed8ed305cb21ab3099459fc431caf9d881ce5ea7662fec4e6b9963ba54b56d2c50bbe3142","ssdeep":"","tlshash":"46600003000000f300f03000033c3c3030f00000c000003cc00c300ccf0030030c300c","first_seen":"2023-04-05T09:34:46Z","last_seen":"2026-05-09T01:15:18.895757Z","times_seen":62902,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-domparser.js.c4db68d5.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.007Z","timestamp":1707742688007,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-domparser.js.c4db68d5.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e980-6b8\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=oDJQ%2BtwXMXCkMiVvJuLw%2BM%2Fmb%2FfeHpaJrmpkU4G4VCvoGVtuIKby4CxlbONRdmWHyqT6Y5gqN1uYgFF5O%2FI4ViwuVjAN5ar7KoSeUboT9oloZre5ZJp8tXiXNurQLo3dXcqNPT4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057e8f556c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":702,"size_decoded":1720,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1720), with no line terminators","md5":"7c57096ad1b2043897bd09133272b045","sha1":"a79d2211ca2f6a659aa62cfffaf07a59c9eb8740","sha256":"e3f128a760e406fa0d77c5ca9e896c2fde9a7d5fbe2ffeaf7e13e8bbf8b19d14","sha512":"c2297757f27ac3b8fd10fed7a904869f34b69340d67db7944955317878cf53ffe3b8049c40603ef24de034d86a5cfeeffe95f250cab9f2a932da30864ebf5c84","ssdeep":"","tlshash":"f631025c7086b1312a6b117f623fb22fb93105757e941060b218c87878b489943abfe9","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.394563Z","times_seen":90,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-4.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.418Z","timestamp":1707742688418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-4.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1356\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-54c\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=0ILxKjbLPhGm%2FLKdpLBqtIYb51v6JTFrEH%2F4btrT36vuf2sX3b0pW87MggxKbiGyOhQVzKrwTcHNdI2%2F2oyzDIcvNVk9T3X7Dws18%2Bo54aeyUgo7FDdPFyHIMnu30J8BBm4awKg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059dc0556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1356,"size_decoded":1356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a78233e0cf1abbb3c5c98ef32a087d96","sha1":"5ac6cdfb7f9e7be828a4d01e57f10379ef173889","sha256":"3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7","sha512":"b320d13ce1076bac638f660bfd29df777c353ccd2f1828ebb7f35b18200d1e4a80709bc00583ec3ebd28c88a94688ae697e61bb387dacbd8e28f8f421add0e9a","ssdeep":"","tlshash":"3621fbdbd61580f00efbd82b63503b9cd19e43caeca86d71671f8e2c2782615618254f","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.131892Z","times_seen":7711,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 749\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nx-trace-id: b9290cff20875285d82d01657473261b\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17,"size_decoded":17,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b64e8b89092b2e3dfd448b10700627f","sha1":"484b3032619fa1acd135d114565b0a5166281c22","sha256":"f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4","sha512":"61c86d8f7c4c3e60739191712080650f22caa78427e5bf9215ebc16ed8ed305cb21ab3099459fc431caf9d881ce5ea7662fec4e6b9963ba54b56d2c50bbe3142","ssdeep":"","tlshash":"46600003000000f300f03000033c3c3030f00000c000003cc00c300ccf0030030c300c","first_seen":"2023-04-05T09:34:46Z","last_seen":"2026-05-09T01:15:18.895757Z","times_seen":62902,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-6.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.423Z","timestamp":1707742688423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-6.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1854\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-73e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=iU8RAEIHHkV8K0%2FKmp%2FmwiQcjqhKsKvGUaKL25Y2cdj%2FDXZMNdO25ArEwV9qQCVD3aDziOpGk22OQ8puslVOsdRFPAO6ouGZ2DcN%2Bhd%2BMkk9o2DJt9vine3UntyXt8IPRLQklJw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec1c56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1854,"size_decoded":1854,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0f174a9245ed9f2a0660204a8320880f","sha1":"fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d","sha256":"1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4","sha512":"c1f991c6e0464f28746cc1e8c117e5fc59536c33dc1d2bbee5aa03385bf1092babbca48a0060c64230d5a60c48e3ee848a0661194320a3a42d6a3f5a0114d54c","ssdeep":"","tlshash":"14312d1c211a1dc8dce0ad3b253bf3c0afd394247a64522ce99664b4f74fe77215400c","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.120741Z","times_seen":7711,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/icon-survey.svg","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.769Z","timestamp":1707742687769,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/icon-survey.svg HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65c9e980-a72\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=rX9YcLp5Ku1Do0Vh7ZNqzpZm4nka4BmDa3ewvais1sYwUrQzLiJhVd%2FPYzVvt6u7NluCLs%2F7yUxRmdnqvK%2Fty7Ear2S6sWmiPYdTepv%2Fc1f15Ws8Ob%2FSLbJlzuf07eahCdlEyvE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500562e5356c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2582,"size_decoded":2674,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9a8ba19b913810bd358e5caf3a7c2a75","sha1":"6eff5e84f2b82772bb6029088ed852a8161b3252","sha256":"58b0a3aa24ef605d4b812bcf92cbaa2e7f78bd43f929ca6362bc259da610399a","sha512":"f4833419aac43f7942e7f93fb40184d404f78f09cfde27b1d9bcc2406689d8c77eb02f9e17d1412713659f117d783644956cb9831dd5c3b4638567f9c1145967","ssdeep":"","tlshash":"5e5168f6d3d19e717cd7cfb097161521f3ce1dbc945892c5b26de8960dc3a868a0d804","first_seen":"2023-08-28T19:39:15Z","last_seen":"2024-12-12T23:35:49.844367Z","times_seen":3350,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-9.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.433Z","timestamp":1707742688433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-9.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1654\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-676\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=22wMdByIeU8GSg4SVTuLZgJKuefjvv2vy70p6cSAVwnmjBqAo51pQqcv5CFeFQKXFtAxHM45fGlNHGr0GD5gGMXU9Ju4Lj%2BLGmJB0Es2Bfspvn9cIWYyyHOrGb9KkmjCU5vIkCU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec3d56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1654,"size_decoded":1654,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"12f578cbef79e63d347e2c8384c03ce6","sha1":"496afa2132dc6a09052596587de749aefa634975","sha256":"be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa","sha512":"ffd2cdc9fafafa2577d3582afb9a4f2483ec9b507fd4419ac9b13180cc4ea10bf5bcb64fa874d4ecdb8ce2827c432c2e87d0d58bb4c57772bca64e6be59c3157","ssdeep":"","tlshash":"ea310a405c37e45548554f068c5a018da7e383cf006203b8036dbeb03953f0de41e7ec","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.133268Z","times_seen":7695,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-10.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.434Z","timestamp":1707742688434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-10.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2222\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-8ae\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=PQ1ycExlJ745Qsb2UdwenGcvWlrE8sBc7R6UWBjzXnVIwrVFJcnoQc1gE2PH9yzn8i1mNYNyOiUFPWpaYbaellED2w3EU8oYaR%2BJjsIt5qLspFI1HxSclb%2FOti7SjpmTT30xfZc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec4156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2222,"size_decoded":2222,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9dd9074774147c349c8a5bd4760c3cfb","sha1":"99675a91391516dee57d557728a8cc96257429a3","sha256":"318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332","sha512":"aadf53e7c71eeef4f5c0f9c097ddf48c4ea205af1eda93ecef41d5de62ae1bed49439e31f3482ce8d78af5abc26b2674b1a654cf7b9f631dc0dd38bef1a8a109","ssdeep":"","tlshash":"8a412b451dfcd5e39068b77f93234a48488c9f62e900d42872f1e868985f9debe0465a","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.121944Z","times_seen":7667,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-13.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.441Z","timestamp":1707742688441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-13.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1888\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-760\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=r67P6idnFGXGrub4M2i7y2ft2lSoVnS16ShOlbhpwBb4MOyanoNXgTk0c5U82hsBJ5h23TP054EmNBt6ieiAGpH2C0KDvy%2BvHQhrd%2BVhHUCYqda2cvHrwgCvCU2eiSbQ9i3z1%2FM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059fc6556c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1888,"size_decoded":1888,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ad1e0d431ec5fcb9a1e7ba8680d14a21","sha1":"0f30fc9c7a5460458fb1e01acff03df4d5809950","sha256":"45f8553b96fbe562a88e1366e8986d14b4d51f7d069604f8d29675844a19b204","sha512":"168058593eff747fa9a2970b5d25ab2cda26d902fe7b67037261ad27313e19f19d5881808973e29e00b686569fea3df365affb260b0326691d3031284dc35c93","ssdeep":"","tlshash":"7e413b50be467928eece0c3d0ee9560763d963329deed8712ec1a4c19d2692512232e7","first_seen":"2023-10-13T09:13:52Z","last_seen":"2025-09-14T15:17:25.122472Z","times_seen":3727,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-12.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.440Z","timestamp":1707742688440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-12.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1390\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-56e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=jVvVyQXcJrXNozWvZbhF0M%2FLmnfUBOorZvrM%2FltrIKqZiGhoJjvxlq2cLD9wV%2B%2BbvkZakuO9pNcA2yNLuQ51UgxMhZZ2HPOZl2XGahyl9rK38czVCwdWh8wIwo%2BmwxQfiCMJkL0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059fc6156c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1390,"size_decoded":1390,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a2a75db01afaab639bcc0c6c76a14c09","sha1":"2c773be63192164745f2a42c2fde74812c6e905d","sha256":"f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e","sha512":"d1d9101099f6b0044cacdf4f978a5ce770f772b5bddf985160e8edfb29f249b2dbf5c0e648631c17287ab843a90f082767283429708ce054b3596f92d8506a76","ssdeep":"","tlshash":"1b21db679c3d414ca5e03cb0103923b3fa095c2ba6dd59921d5c45e2514e579b1d14e4","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.13992Z","times_seen":7477,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-11.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.438Z","timestamp":1707742688438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-11.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1526\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-5f6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=fV5PThfvg3NoxGlSs1cmKLjJ5YIriQ%2BoXCJezksWHgYUeB4491Z1JwH6btwzQe9eibz5D8qW45PY%2BJ2Gx2Nk5dgqHPW3mPYo18F1UwOA%2FaC5zRWNW8nHmeHg53yF9KXG54PQaac%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec4956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1526,"size_decoded":1526,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0100f949c3302195d906e13bc199399d","sha1":"2b39580485f3e9ca81a8a2ead4747f89731800f4","sha256":"10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511","sha512":"8ac1035459dcf06f85a222505e7738b7672f65438f4b830bcbaedb9d0401733d5e094737684f10085b94020ed9d2064edc83008f2937e7cd5317edcceb70eb3b","ssdeep":"","tlshash":"8a31f9485393f3ae2a24141392e305381b3a54459a6cff9978942c57d64e010894fbf9","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.129252Z","times_seen":7540,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-3.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.431Z","timestamp":1707742688431,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-3.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 982\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e981-3d6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=pJdSZI6R4vGDVwKdYKO1b6ce1PxRT07SU8qLSurQEy6%2BrRcdL78JpyG8F%2F%2F4bHH9gLHmKrZmQWLymohARx725g6%2BqqtiT75%2Bvj5X4ids1mEqDudVXJgz%2Fe0y7kh7VI0D0Qn%2Bqp0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec3a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":982,"size_decoded":982,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"489a7f64f96c92f3325af92fa2af78b5","sha1":"098cbcbd7ee329321d2fb7bac74535ab258a1f97","sha256":"fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f","sha512":"4454a37753d46c015f85846ecc150db5845a9b460d48e82b597013023432f195d02a995a9d3a02f61bd60479b9b4f2138f9c9aa936aa22a91a73d40d8a1d88dc","ssdeep":"","tlshash":"b211612582ec3644b300a8c2aefa094a3a0080b88c6b92cf659a541dd988fd88187c87","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.138785Z","times_seen":7708,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-8.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.427Z","timestamp":1707742688427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-8.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1802\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-70a\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FMwv12TXI%2Fm9tw61KGP8ZEVLrWvSrc%2F3VjIDvyI89yyXCP%2BSaX96uiFPiloW5sShG9hZhjfRsmgasN%2BnE7Viyz0H%2FYb%2BNUwgZUNSB5mmvYXHMguGSzYeg0jq8hVjs9hEXvg4nN8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec2356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1802,"size_decoded":1802,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2ad9296fef7cd1f60823b80098d31c1f","sha1":"145b3a66be3deb658a453963cef39a018b6f0928","sha256":"82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d","sha512":"bfced3f1c334237fc3c5ea26142f52d544f6450395e03a8e629073004374def3a73c02c0b6042e5c2766a92c0729259fcf3bb5663f4ee602f3dbde4adab945b3","ssdeep":"","tlshash":"23310b763b45717f6d5a4bc130eb386015ad0e6743c28a530812dbfa76848d28307a9c","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.121366Z","times_seen":7689,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/rain/dollars-1.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.559Z","timestamp":1707742688559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/rain/dollars-1.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://googrootsurvey.top/css/survey.3b7d0b23.css\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10546\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-2932\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=NSn6m%2B7S3TA4jOtMpNncllX5dwFGZTpu%2BliR2tPUWTPzUOXnU9h5KRNr%2B8slS9NMR%2BAh4hcFepCngrMIkAbRG9VO5ucCf5YvER5ngByNpG8yQTWmSPYgrcKvJg8%2FFFrZ2fMO360%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005b5e7a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10546,"size_decoded":10546,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a5bef813a0113d018592091106451c8b","sha1":"59365e96c4abca5eb98a0c56db0af0bb5cbffebb","sha256":"036beb7de9c9d450e1442d593ff70ad392ca4be6754e7feaec249c0009e1bd83","sha512":"7342ea2cce2f129b1dcdc90424273fe04cb4155fa650975b042fb73d5d517288f2166ae566bfb2a2b2342be854072b5a41de89ba82bbf1e09d24c0e23c9d1429","ssdeep":"192:s1yQ4tBxCFyu1x+rngG4vyYA2YuyOJUQyedPcPcqX1y/0Ar+avH+5Vcewix17dvU:swQ7b18rn3ynAxOwPcqXiyavHSKIXW","tlshash":"0422a07e5decc4c9d78e58e516d937b238950640dcc9e3e50726d8346f149367ab2348","first_seen":"2023-10-13T08:41:44Z","last_seen":"2026-05-01T16:21:33.119586Z","times_seen":3542,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/rain/dollars-2.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.562Z","timestamp":1707742688562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/rain/dollars-2.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://googrootsurvey.top/css/survey.3b7d0b23.css\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 8140\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-1fcc\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=F%2BGwRsDqOAQmkGTgN6GILadOItVHCYkEMaesD3laiXT8dUkex9OWXWEkdOu2%2F1i8NbFGBAUXm1VILZ7LVe0gi9N6XUcT9aaYK6BHNUj8LOqhUsmhflIfrti2JP6ro5eV5lsClZc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005b5e8056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8140,"size_decoded":8140,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8b4203d496c3f52b116af082a0cd4017","sha1":"de5369e9459e240950bb7eb5261eaac1db26907f","sha256":"8dd1f04088c25e20d15e1bc23129604830aab2b4d3d0a408a5f047f9768f39a4","sha512":"c43e3ac52632798a5dcd00cdcb1acf5224f0db3b79240bb8b4243fd66e0f3fdf69fd64d23b54c8d6ca50ac684cba565f44f52ad0efe7a14069a6ac0a8ea5d702","ssdeep":"192:0j30Spk538GrzHPo0kUC0dcM60hlemIpHYNhmTNvs+mpAU707Cmrg4H:20Spk5s6zHPoZ0XemIsC0f0z","tlshash":"4ef1bfab931e33b5c34674867bcb4e541578db3330e0333aeb951b725c4916be9186e4","first_seen":"2023-10-13T08:41:44Z","last_seen":"2026-05-01T16:21:33.077423Z","times_seen":3541,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/rain/dollars-3.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.563Z","timestamp":1707742688563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/rain/dollars-3.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://googrootsurvey.top/css/survey.3b7d0b23.css\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 5938\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-1732\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=QeFNUhm3G1ZFJRfYzyaD3c1RoezEk6EDtBO%2F%2BcwVk6J7p59cjScjZhoVvlnBY9J%2FhOahjFoSe%2Bn19%2Bvj3K7LGvDkGqUWIq%2BD8EavjpeoYTlVdyrwrt%2BZEJ1XLNBfXcJ87Dq%2Fu20%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005b6e8256c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5938,"size_decoded":5938,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51ea76ff382bff8ef58a9943f7fd21d1","sha1":"5c3d6ad6620fbde5ce3dddc88604e6d54621eba2","sha256":"0240f30fc542fb5c2d532f33bc793b797199adaea75e22a7d9f04674b80d9a32","sha512":"02aa6aec880a18b231f3ed62187e21cffcdf91e90178f167eca1243c8cb02c3ced3e7ff57499ef7a103cd9985c08366cbf6223562759170978be5b997e6cb2d6","ssdeep":"96:aCEvRGWtlAGaH5vW4kpu8Er0LmAD4S1/CemVj/tAJN9jPF3uYSNSh:advRGW8BHJW4kpuELbDT1tmx/teXjB9t","tlshash":"84c19f801dfb4af12ef600c57acebd7045ab81183e8a580587fc119b307532a695d77a","first_seen":"2023-10-13T08:41:44Z","last_seen":"2026-05-01T16:21:33.122343Z","times_seen":3537,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/icon/finance/man.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.567Z","timestamp":1707742688567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/icon/finance/man.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 590\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-24e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=BHb2sZ1qZVnjpcJAaAwGmJPCaLtX%2FNgtQHZdfgngIdBDYSdXmp5VRAUXNncMAIVpQMeR9W0Luhxte1wQS6CczUCFuFcXrvUTvZdiK35YcAU%2FP70s%2BoTinwvt3IQXUqvPC9qHVVM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005b6e9a56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":590,"size_decoded":590,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d729db2f101fe611a5a74cec2fa7a7d7","sha1":"5a13312a8723c57605804f07f064b5f233ea9595","sha256":"929f7c5d50d2bea65039de8cf572e24c1957209c92b983eebe4c322a93ccfe87","sha512":"3fc90738bc70d32650cadaf0fe38832cd43b5f440649a6a6471cc74303549a54014567dea15331370fbf7bc91b18bd18646aed6ce721f3138570e3de721b8191","ssdeep":"","tlshash":"1bf047a203720094c253e9f243c133b0c1857c0a8f091b5407a389bfda365c50913a55","first_seen":"2023-09-15T16:47:31Z","last_seen":"2024-08-21T06:48:50.321883Z","times_seen":854,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/icon/finance/woman.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.574Z","timestamp":1707742688574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/icon/finance/woman.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2356\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-934\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=bLHvrQbKo4FRG890OpMnFRhDgHLfXY6KpyW3DQm4mBOfzTGXyjBvvg6uIzkQpiQPHHqrCrNJq2oVxjWKxX84l8Rs%2BAri5IdOug1sb58NDtnQhLTRZBXAC%2BHxVyrIMmBk3fR7kMU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005b6ea356c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2356,"size_decoded":2356,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"590fd4a60be002011c4d09a32b3dee9e","sha1":"45dbb90f6edd9dd9b777e5b3fc98b82ca18eaaf2","sha256":"12f0bfe3db63dff3314b64cb12871681258a87bfcec40db1bc7712d4a32620e7","sha512":"02bc4aa6184ea13e5353ab51320a68da111a6925cacc90b9fce73d7dfe922f6025f07926db17fc29b7f96225165f61e678c537fe6631b4482199e8bc9399a381","ssdeep":"","tlshash":"c9411b3bb6f431adf0b1a66c9c0bd9798df32974362d1cf15da443f6651a0041cbd044","first_seen":"2023-09-15T16:47:31Z","last_seen":"2024-08-21T06:48:50.322513Z","times_seen":854,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/betting/sport-betting/star.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.566Z","timestamp":1707742688566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/betting/sport-betting/star.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 246\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-f6\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=qo4EUjSdOcyoR3tTR08K%2BVRZztyr2wk4dlfoqac%2FkAMSd7cKZFLkfb9%2F4%2BO8U76tO49H9XQdrzs0UjXI4POz%2FavMqrf%2FwEMKM7lIXXhepQhLsHBX7ETBBkTCJKHommmsAV2KvL8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005b6e8f56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":246,"size_decoded":246,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"01caf8f85cfefbebbb8cd3fde3f6d973","sha1":"f47df1411899076e0856c75114597168e2afd8d0","sha256":"7bae9821e9132aee43121502a061a55671dbc660966e0c5c3e2a88a6d48b9a84","sha512":"7cd1ad051c94971a3a5e6ad0e678ca4774e6ec78641e12664b7f6cf8e549eae8d0830577ccc764d1e4131994d3336ada1d017ffe684d33b2c50db7f8a43fb56d","ssdeep":"","tlshash":"dad0976b2a56a28cdd032c3388a48b0dc787515ad798ffb4cc6009a1655070462f9227","first_seen":"2023-11-30T16:02:03Z","last_seen":"2024-08-20T17:19:56.673245Z","times_seen":592,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-do","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.611Z","timestamp":1707742688611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"OPTIONS /sync-do HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"offpichuan.com/track?offer_id=9540\u0026z=6070194\u0026request_var=2256\u0026variable2=65ca15df8d67a40001bc98bc\u0026oaid=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe","fqdn":"offpichuan.com","domain":"offpichuan.com","tld":"com"},"ip":{"addr":"139.45.197.237","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.477Z","timestamp":1707742688477,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"offpichuan.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Feb 2024 21:03:49 GMT","end":"Mon, 06 May 2024 21:03:48 GMT"},"fingerprint":{"sha1":"DC:A4:ED:0D:9C:95:9F:89:94:CA:0B:F4:EC:28:BA:13:BF:A1:67:00","sha256":"7A:79:FB:72:70:F6:F3:F4:25:34:39:94:6D:23:93:C7:FB:77:49:EA:AD:93:EA:90:AF:69:4F:25:95:89:FC:E2"}}},"request":{"raw":"GET /track?offer_id=9540\u0026z=6070194\u0026request_var=2256\u0026variable2=65ca15df8d67a40001bc98bc\u0026oaid=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe HTTP/1.1\r\nHost: offpichuan.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json\r\ncontent-length: 165\r\nx-trace-id: 9b54b22b71e1a3bf6b1c357371b772d6\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":165,"size_decoded":165,"mime_type":"application/json","magic":"JSON text data","md5":"3de2c8466a22dde915b4b405ff27042f","sha1":"079c0951f9a50d053a5d453d4f8d3f3765474295","sha256":"d4513dd79b9a338cc081cb5d4cc1728eb0ba9d7734a45b78b1444f85b5e835f5","sha512":"f8bcdafe7f4b55dd88a322863df56b565955fabefcf3fc4fab7897eb25a8731c2a7cf5489f5a39454b76b310710624008a7788079bc29d219a5bb3df2adfffec","ssdeep":"","tlshash":"dac08c02889d8931ce1f030c408aab07ebf0408a8291a695d91f9e201a3c3be228d28e","first_seen":"2024-01-15T03:14:10Z","last_seen":"2024-08-20T12:28:11.118097Z","times_seen":823,"resource_available":false,"data":null}},"time_used":395,"timings":{"blocked":98,"dns":8,"connect":45,"send":0,"wait":46,"receive":0,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"offpichuan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"OPTIONS /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-do","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.611Z","timestamp":1707742688611,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"POST /sync-do HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 157\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 179\r\nx-trace-id: a9e31137bc454da006d87b7466e92990\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":179,"size_decoded":179,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"081142aa1c9267422ee7fd25ac457579","sha1":"cf8a223610da412aab4cc9aec68f6f304258b3ce","sha256":"58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19","sha512":"efa1718d690993efb46af11dba3ad095ecb02c2bc3e22e37f056c29ad3aedf908d9672a3174e09c866a801e782982efe5a4431d6a1584b5df0599f120b29a43d","ssdeep":"","tlshash":"6cc0800c43150cfb4f5026cc384005ceb7c14dc1644884414057cc5677c159504751cd","first_seen":"2023-06-08T15:15:31Z","last_seen":"2024-09-20T20:16:29.408709Z","times_seen":9824,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 1774\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nx-trace-id: ac519f3a651c824e5c72e4161369e608\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17,"size_decoded":17,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b64e8b89092b2e3dfd448b10700627f","sha1":"484b3032619fa1acd135d114565b0a5166281c22","sha256":"f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4","sha512":"61c86d8f7c4c3e60739191712080650f22caa78427e5bf9215ebc16ed8ed305cb21ab3099459fc431caf9d881ce5ea7662fec4e6b9963ba54b56d2c50bbe3142","ssdeep":"","tlshash":"46600003000000f300f03000033c3c3030f00000c000003cc00c300ccf0030030c300c","first_seen":"2023-04-05T09:34:46Z","last_seen":"2026-05-09T01:15:18.895757Z","times_seen":62902,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/x5WWoE57Fv0d6ATKsLDIAKnt/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.841Z","timestamp":1707742688841,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 09 Jan 2024 06:30:50 GMT","end":"Tue, 02 Apr 2024 06:30:49 GMT"},"fingerprint":{"sha1":"9D:25:7E:5C:DF:C3:E5:5B:00:4F:04:97:A3:48:A3:30:60:9A:DB:48","sha256":"64:FD:C1:1F:85:3B:AA:47:85:DC:8B:3A:8A:A9:C4:15:BB:01:EA:9A:A5:8B:63:12:1E:9F:7A:FD:D6:B8:A1:85"}}},"request":{"raw":"GET /recaptcha/releases/x5WWoE57Fv0d6ATKsLDIAKnt/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha\"\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}\r\ncontent-length: 199529\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 12 Feb 2024 11:41:12 GMT\r\nexpires: Tue, 11 Feb 2025 11:41:12 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 05 Feb 2024 05:00:25 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 4616\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":199529,"size_decoded":501379,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566)","md5":"ca50556eed6c3ec820e1e84b8b8c4c89","sha1":"94b412b047930720ea1cf6e26279821859f6a666","sha256":"5aa02ad9ec4550065de8002ea1108be5d10bbb1173d2f3447f88ce1af317d4bd","sha512":"acf6180697b349825c18ec7372c894a455c44683a72c7416fe2abee46873a585bdba99b0167dbe77bca6582928de4f01a41a79899f61f5b30e3974b8c159e1b8","ssdeep":"6144:o2upgm9JdG0ukPIPQCUhS1PeLGIBmQ9qh90y5KQy9o66+U7nlIlg:kgIJdrubH1WVBmbz0y5ENq","tlshash":"7ab4e7dd704675b28322b2f5a067285aa27e56a4e84c0c5ef195c8f13fb084db076fb7","first_seen":"2024-02-08T08:46:24Z","last_seen":"2025-11-30T12:28:45.871451Z","times_seen":901,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":47,"dns":3,"connect":9,"send":0,"wait":9,"receive":33,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=f5f033be-5ee1-4170-b2fa-04e959061fc0","fqdn":"datatechonert.com","domain":"datatechonert.com","tld":"com"},"ip":{"addr":"37.48.68.71","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.993Z","timestamp":1707742688993,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"datatechonert.com","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sun, 10 Dec 2023 00:00:00 GMT","end":"Mon, 23 Dec 2024 23:59:59 GMT"},"fingerprint":{"sha1":"3F:E1:50:2C:9F:FC:F9:37:03:E3:B6:34:00:06:89:69:01:E7:C3:27","sha256":"FC:35:F7:B5:E0:C1:4A:50:1C:BF:FE:3B:C2:3E:44:74:7E:DB:1A:0F:E4:E2:79:8D:70:1A:58:8E:85:C0:20:37"}}},"request":{"raw":"POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a\u0026ruid=f5f033be-5ee1-4170-b2fa-04e959061fc0 HTTP/1.1\r\nHost: datatechonert.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 1486\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.19.10\r\nDate: Mon, 12 Feb 2024 12:58:09 GMT\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 12\r\nConnection: keep-alive\r\nAccess-Control-Allow-Origin: https://googrootsurvey.top\r\nAccess-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE\r\nAccess-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match\r\nAccess-Control-Allow-Credentials: true\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12,"size_decoded":12,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"adb4650bfc9d2a73d4dd69583b0ceb14","sha1":"1ce399d6e936232aaf2192cd7903a279c5015f22","sha256":"21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed","sha512":"3fbce22572bbed1aada0f7c6706f16a97e7c0ea132dfee1a7eb80f5e68da1cc63c891a5bc3ea8e87f0c97be3002212a0efbb2af9553acb45e0d447a685cd805b","ssdeep":"","tlshash":"436000000c3000000cc00c0000c00030ff300f00000f00c0000c00f003030c0c00c000","first_seen":"2023-04-05T07:30:31Z","last_seen":"2026-05-09T01:05:20.234742Z","times_seen":56720,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":78,"dns":0,"connect":21,"send":0,"wait":24,"receive":2,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"datatechonert.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"OPTIONS /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:09 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"arleavannya.com/sync-metrics","fqdn":"arleavannya.com","domain":"arleavannya.com","tld":"com"},"ip":{"addr":"139.45.197.248","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.321Z","timestamp":1707742688321,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"arleavannya.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Mon, 22 Jan 2024 17:53:34 GMT","end":"Sun, 21 Apr 2024 17:53:33 GMT"},"fingerprint":{"sha1":"A4:8A:3B:44:4D:C2:D4:BD:92:AC:E7:B8:3A:C3:C9:4B:85:17:24:1F","sha256":"3F:35:43:18:22:85:53:3E:F6:4D:62:FF:FD:37:DE:FA:88:B3:59:32:A9:38:57:FE:B6:DC:0F:D5:0C:31:38:45"}}},"request":{"raw":"POST /sync-metrics HTTP/1.1\r\nHost: arleavannya.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 850\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:09 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 17\r\nx-trace-id: 3944e32003b924c13b98400cfce00d21\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\npragma: no-cache\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":17,"size_decoded":17,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5b64e8b89092b2e3dfd448b10700627f","sha1":"484b3032619fa1acd135d114565b0a5166281c22","sha256":"f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4","sha512":"61c86d8f7c4c3e60739191712080650f22caa78427e5bf9215ebc16ed8ed305cb21ab3099459fc431caf9d881ce5ea7662fec4e6b9963ba54b56d2c50bbe3142","ssdeep":"","tlshash":"46600003000000f300f03000033c3c3030f00000c000003cc00c300ccf0030030c300c","first_seen":"2023-04-05T09:34:46Z","last_seen":"2026-05-09T01:15:18.895757Z","times_seen":62902,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"arleavannya.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/sw/sw6679100.js?var=6070194\u0026var_3=null\u0026var_4=null\u0026ymid=2256\u0026ab2_ttl=5184000000","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:09.134Z","timestamp":1707742689134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /sw/sw6679100.js?var=6070194\u0026var_3=null\u0026var_4=null\u0026ymid=2256\u0026ab2_ttl=5184000000 HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:09 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=1321\r\netag: W/\"65c9e980-529\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=VHzGzf3VpGhRJO9kIL0E1fULhOqEjnh2YELlKmsqkjX94jWrk8gAsr3WSXKEGxVdqyKRLyWsuby2ukXSidsF013Lq4mcASkqoTksoscwzh%2B40lBokY32qY%2BW7fJRD7MmvN4UrFc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005f1cc456c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6933,"size_decoded":1001,"mime_type":"application/javascript","magic":"ASCII text","md5":"3e410d4367b7b5067978bc0f1b452d11","sha1":"c19c08239cfa055187e421790a7cd0aef201de76","sha256":"02a5b9e6ce975e7bc74f18dfdb4d9cd95667300446e4daa279639cdf5a8da990","sha512":"20e97692d0733d9bb5ecde7bd10938dfffa6b4b535ef80f5f010b5e5b670f909ac68b43599a2522dfd0acebc1d79a835fb442c0813f2435da18b7438ceecbb63","ssdeep":"","tlshash":"33117fda2dc2c24c03d61f256c162709b47fab411d4c50a098788de3e41ce0fcb1f998","first_seen":"2023-12-01T23:50:51Z","last_seen":"2024-08-20T17:07:56.462327Z","times_seen":27,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-constants.js.19349cba.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.021Z","timestamp":1707742688021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-constants.js.19349cba.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e983-258\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:51 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=aXkFhKqVHLmeB3qs2LsI6I3ORq8pdJNdXizeDxbF%2FM%2BEhA25EpY1pYbhhcPj2uoLeOXAuKtbeFTqKtwK2boLpl43awfFnQRCZ%2B9c31DIc7xbmleUGeHG9wHtFkT6yEmnSfp3%2Bzg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057f91256c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8971,"size_decoded":600,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (600), with no line terminators","md5":"0455c0a95ad62d73e6d4b9c3e1ab2ec5","sha1":"5fa06e00056d4361b4335fbcbc8b1c7ac7430d65","sha256":"886e1dcfe8c826cbb1683b268d86dc031f7c551d76e8c64918b3634514b45735","sha512":"f1c956594264a7717890b518f5c2443e490b1fdd3eee06e32ce9e34902dc7bd250e0d17ecfe2b5a3f4982f1c5c16488ae204d36d6dba4460c23133613e8cd596","ssdeep":"","tlshash":"9e01ac0af486c81a361a6f4823ba1f351d291111a905b09e3900c3ba915e83d169bfda","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.396315Z","times_seen":91,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/s-storageService.js.2a07b5da.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.718Z","timestamp":1707742687718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/s-storageService.js.2a07b5da.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-87a\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=glTsXio1BCUdrFLFiRWuUUq4%2B%2FK0SiGSK88UGA5G7KesSz4dfvarpDhaQIZfQ6NyDERldZlMVEsTVlT748j1ms05VhigPI2O7PDWh7lENDQsKQzmBwMkOUwZ0ey1FWdaATaRuc8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500560e3156c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10807,"size_decoded":2170,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2170), with no line terminators","md5":"6607e9abab001795abe5dc7165c98948","sha1":"2002d2e98a5dbb3f7c264f533e9b6f83919489b0","sha256":"04697ac28832825aa6fb3ddb543889a50b1d1c10bef84dca7393022134b69267","sha512":"ec78cf63140c6ddca74f8bb00bfcf565630337ebe451519c7cb1b0c10ec2b02b83f2ffe4a4f1f9808cd181d82432e5c5355154de13da28c7dedf83666cf84ded","ssdeep":"","tlshash":"bb4101c83281b43654eae06e615f3506733d1494742dd0287056cca07eadd6e8773fba","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.330086Z","times_seen":92,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"offpichuan.com/rotate?zz=4292526;4326653;5128285;4949467;5381242;5381316;5381339;5381307\u0026var=6070194\u0026ymid=2256\u0026uid=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe","fqdn":"offpichuan.com","domain":"offpichuan.com","tld":"com"},"ip":{"addr":"139.45.197.237","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.474Z","timestamp":1707742688474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"offpichuan.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Tue, 06 Feb 2024 21:03:49 GMT","end":"Mon, 06 May 2024 21:03:48 GMT"},"fingerprint":{"sha1":"DC:A4:ED:0D:9C:95:9F:89:94:CA:0B:F4:EC:28:BA:13:BF:A1:67:00","sha256":"7A:79:FB:72:70:F6:F3:F4:25:34:39:94:6D:23:93:C7:FB:77:49:EA:AD:93:EA:90:AF:69:4F:25:95:89:FC:E2"}}},"request":{"raw":"GET /rotate?zz=4292526;4326653;5128285;4949467;5381242;5381316;5381339;5381307\u0026var=6070194\u0026ymid=2256\u0026uid=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe HTTP/1.1\r\nHost: offpichuan.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:09 GMT\r\ncontent-type: application/javascript\r\nx-trace-id: 9326dfe28a03cb55958467dcda020022\r\nexpires: Tue, 11 Jan 1994 10:00:00 GMT\r\ncache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0\r\npragma: no-cache\r\nvary: Origin\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-expose-headers: Link\r\naccess-control-allow-credentials: true\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64\r\naccess-control-allow-methods: GET, POST, OPTIONS\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace\r\nset-cookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; expires=Tue, 11 Feb 2025 12:58:09 GMT; path=/; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14473,"size_decoded":14473,"mime_type":"application/javascript","magic":"gzip compressed data, max speed, from Unix","md5":"9f14f377b324fe0e259a8bc9f1aad430","sha1":"38dd9aef924c193fdb2a345043877e6f064d9002","sha256":"147b866943173b1e5c0b234d5bb1fa01ab48d6ec1048bf4e82ec9083fd862243","sha512":"f4f38a69837ef183d88e02fcdf2d1bf5df63f2d7611ccde364be95deb8139b938563886a8667521cccbd21b462bde3da8788f66fbda8c03d79f63614e944ca0b","ssdeep":"384:uCxVhrQEhKyDjmf5Wx+82BdpuXo2lSGetgiaTV:u8tQEhROWx+82BiXoKetgiq","tlshash":"ac52d0c956d6a588e4b07f30b1060e81ba1b58cf9cd28e47ec9b3fb218194e44d3d1e4","first_seen":"2024-08-20T09:50:28.989758Z","last_seen":"2024-08-20T09:50:28.989758Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1483,"timings":{"blocked":82,"dns":8,"connect":42,"send":0,"wait":1169,"receive":0,"ssl":179},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"offpichuan.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-react-dom.production.min.js.82e7d04b.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.732Z","timestamp":1707742687732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-react-dom.production.min.js.82e7d04b.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=129359\r\netag: W/\"65c9e981-1f94f\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ac22hr1bXxi%2F8S0smn%2BfQqYopNRLEW7o1fj1MiU9A137gBpeGgZpzjJyKRmwAuhkEnBZtvUZcS1K9ykz9CdlYcITgRucBoIgki5DoWKi9HZm4fXsCRmgGFz7be13juA2rgEzaAk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500561e4456c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":129356,"size_decoded":129356,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1a6ba4ec06bc62522664dd2c3322806a","sha1":"de585cfceb5edc6cfae839f27d994341b295e02d","sha256":"b00befad2af4cae1d45592f2771d21fc3ea2bc33146f8b3863fee997a8fad108","sha512":"eeb2f4c1b86813c360de65c04f5d4d201f6f949e72499f6aa89190f2068f90233be0a0636dce6a82d196bda451c0e8395b3b4920238e9d47a5caa404bfd67c56","ssdeep":"1536:rNvNER2WFUKulz0FiykoMa8gRPrV1ILRJUT8qHc8:rNlZeWXKR8LReQ8","tlshash":"a0c307e83d96e6526ab712a700ef1813733c291b280c4d60a615fd8e74b841bb17bfdd","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.332757Z","times_seen":67,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=explicit\u0026hl=en","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"216.58.211.4","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.987Z","timestamp":1707742687987,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"GTS CA 1C3","organization":"Google Trust Services LLC"},"validity":{"start":"Tue, 09 Jan 2024 06:31:40 GMT","end":"Tue, 02 Apr 2024 06:31:39 GMT"},"fingerprint":{"sha1":"5D:23:4F:47:50:A1:0C:C2:BD:E0:26:27:45:EA:E2:C7:F5:34:61:5B","sha256":"7B:CD:C5:14:F9:98:7C:54:EF:81:53:73:B3:00:FA:83:D3:17:0A:9E:91:82:A4:87:2B:D1:C8:CC:58:CF:CF:7F"}}},"request":{"raw":"GET /recaptcha/api.js?render=explicit\u0026hl=en HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Mon, 12 Feb 2024 12:58:08 GMT\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self'\r\nx-xss-protection: 1; mode=block\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":852,"size_decoded":852,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (852), with no line terminators","md5":"78c8be896bc1f2c1f00ad563f61a0eaf","sha1":"0fc5501d1a5c12ac214303ec929ac7bc650645dc","sha256":"0b5fd874139a6b35b0b7b5fad1e5e40d47d415c8d876555eb8a666103491adb2","sha512":"23ebb412b9967a673212f02e1cd916b0da7a582967e8e9c50946288f2189dea05fe833914727e54b4907e1b31dcff7cf88d9c2e38ab36cde9e1f8b1917c6bd66","ssdeep":"","tlshash":"10015ef62500f0350eb319b2e0fbcfa0f0126028e41c88e4aa1ade841e6dccbce04905","first_seen":"2024-02-09T03:45:08Z","last_seen":"2024-08-20T09:59:30.060376Z","times_seen":98,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":34,"dns":1,"connect":7,"send":0,"wait":19,"receive":2,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-dom-to-react.js.a72e65f9.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.008Z","timestamp":1707742688008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-dom-to-react.js.a72e65f9.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e980-43d\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=feUfx6f3SLFqjuB3sufmUdpea6nvB9RyrY8irY5PZ4vpx6p5Randc%2Bmd5YwipFhoJ7aHUGluHqan%2FgJiJ7bc5kBuSdimas9OLxZ%2FQ5pErtRJm85RYdz0ZcorTpDbNFfVBtymPEU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057e90156c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1085,"size_decoded":1085,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1101), with no line terminators","md5":"157999007a87873d0826f59916ca65cb","sha1":"04e4179a726c3990ab40fa00d4ae3c718cf91499","sha256":"21c0f082db023da8864dfb1cb4ace90e7b559c08c81781f961fe05b4602a6659","sha512":"2cc97dbba9cae588016cc2f799d52982fdf8ffe36c22a21fecdd5dadc9ead920ce34fd8d7e936ac88f77f72f3a04ab9f9194d2021a4213d645212005024ff607","ssdeep":"","tlshash":"ac11638430c4ba9e7ddb48c515f7742fb2fe581cda1449925310c0a68728de0269fbdc","first_seen":"2024-02-11T15:54:54Z","last_seen":"2024-08-20T09:54:04.385194Z","times_seen":58,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/css/_core-survey.d3ac2ee0.css","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.756Z","timestamp":1707742687756,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /css/_core-survey.d3ac2ee0.css HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: text/css\r\ncf-bgj: minify\r\ncf-polished: origSize=84\r\netag: W/\"65c9e980-54\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=%2F54EjfsFrEFV4rowYfKTq62Rml226WH1uD%2BMcnT8ucmdbPrfdRGWRpppvDuPw1COFmQX4xE4gFVger%2BVwKRQgasFLANcN%2Bm420rRwMlJpzJUvadEIFPk5QxhQ2dy3nis3Jo9tWk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500561e4f56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":83,"size_decoded":83,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"30d726a40ffe74d794b282ca1795b44c","sha1":"b43155653a1b9cc8d257687df9a75e0f204db348","sha256":"4916da6d6e00e0e6681cccaf9107eb45fdfc78fe2e476444623c30a64959b5e4","sha512":"f4e355a95229dbcb608d9ff2b048ad4d18ac95130b83126a965d2f965b04b03e74a0bdc9df8fa8fa5c3b0945fb534fca8bba466b853f3d1cec6919c38f890167","ssdeep":"","tlshash":"0fa012222050031d0ef04828889310189f59c099a34610c44864114417c534061b0180","first_seen":"2023-12-04T14:50:35Z","last_seen":"2024-10-26T20:44:51.32304Z","times_seen":20437,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/css/survey.3b7d0b23.css","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.758Z","timestamp":1707742687758,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /css/survey.3b7d0b23.css HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: text/css\r\ncf-bgj: minify\r\ncf-polished: origSize=71475\r\netag: W/\"65c9e980-11733\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=VQBkY0XzpXSCuvpZJwlXigmMnrY%2B37Vt71F2zJ43ljh181wfudFLdwUj%2BQ9KrfDdDNPsHVLDFJ9Gj2YfMuGS5qQ2vPEZIHv4ehbSX4RrPUToErCeIJRw8pS8OM6nOxuaKUlDnVU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500562e5056c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71461,"size_decoded":71461,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b73782889f162bcbf6cb45913f540ec3","sha1":"27cd8e6d8b4159b1a4f3e466b845b7d0a7e61d67","sha256":"ea6df993a607e008f434e5e950a08da1397044cbc442cb76d25f02cf3499c77b","sha512":"000f226869afaa420c6df3c74c86299cfac7951a170a8f94a76b618fcaceed0d956cdb776020a208347c2346718fae925f5ff2330bb2798fe2afb16da0fa078a","ssdeep":"768:m6AvYySf++Tbexfp4Buh/fZiAK5BtbfOYqFb6uN:maf++TruNYqFb6uN","tlshash":"6c63b672dac0142cb27b4879d8e4e35eb22e6510f7165fffa912662ccbc23c551a7b09","first_seen":"2023-12-18T17:04:14Z","last_seen":"2024-10-12T23:00:58.49071Z","times_seen":2683,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-possibleStandardNamesOptimized.js.52c34469.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.005Z","timestamp":1707742688005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-possibleStandardNamesOptimized.js.52c34469.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e980-1d99\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=A5CCCFm0uD7YQ3oc5%2BUx3AzxuLF2hppc7SvlXLopV0biTD6t3o2%2FOBgvvWNVDS7z7%2BRnJkzp3X%2FfO9H7mTDOdMWOLBIwL59bTGo7kqVM2lt3IBTN2RnYeNBHuDfrFNefZ1ADwbg%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057e8e956c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7577,"size_decoded":7577,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (7923), with no line terminators","md5":"d10e1efe9b48a98d1de00738b82c02b5","sha1":"43c7009b8920b6e2d9848306166dc3bba9a5d24a","sha256":"7cccf68ce62b1fd3e4d67b82e6d6e8e9ac8048a349e4ace3f0f6f68fd70c9cc8","sha512":"6fd49e085162e1110efb91a07bb03530d222b1872a4db8a28fa2dd7859a331ddd5d3e408de0261713d199862ed26aacb4898584a26ceac963cac0bb7f8dafeff","ssdeep":"192:gkIo9Boy02VPTUcdL9qP1zVWn3m0NUx2Ah/FCPGB++0+:gkI+oY9TviP1zVWnBNUMAh/IPB+","tlshash":"37f1a529f904dca6a413c15fb6fa2e0f98185992bd0239d5c78cc42ca2e953c235ffd6","first_seen":"2024-02-11T15:54:41Z","last_seen":"2024-08-20T09:54:04.372391Z","times_seen":62,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/s-checkSessionStorageAvailable.ts.034e8a5d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.721Z","timestamp":1707742687721,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/s-checkSessionStorageAvailable.ts.034e8a5d.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e983-14a\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:51 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=5qk1M%2BHlhD5sDh7hY2t8NwdZhNMpEWTqVZuRVspY3rHKWYgmt3g4nXj32MehiTGWxRWnRzZEp7a%2FpgfYQSxm1w9HcwgLat0Vb%2F4UwH6fQRdnlz0htPt3pn4FsS1V3e39Ex7nlYI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500560e3656c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":330,"size_decoded":330,"mime_type":"application/javascript","magic":"troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators","md5":"b08b92b26188e9a0779da46d38424f05","sha1":"0efe50bf9576cc45c5e845890c0565702eea83e1","sha256":"e071db6b213971ece635bcc538b8890381466cdb0a324bbb5c7cd56f4fc64106","sha512":"e697fa01448d2c9f3415bf571bbed9ca0937a336e9ce7e38e72c7a5dfc4f5950b173004f63aa0fe159a699e83354206feb9f9e731851274a1bd97140ffb7e720","ssdeep":"","tlshash":"78e0c005b0c13e183533817822a667267f3f00a03b2c50f3892680443d08c4a8337bdd","first_seen":"2024-02-11T15:54:41Z","last_seen":"2024-08-20T09:54:04.373662Z","times_seen":61,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/config/sd/sd-9540-en.js?v=10","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.861Z","timestamp":1707742687861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/config/sd/sd-9540-en.js?v=10 HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-1f1b\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=OINqS9bWDZgAlwjRiaz2o2s3QqEyVeBnYyh%2BZCn8orLAEYjnacs26lkBNkeQ6xDSS%2BhI0AsIdMWHMkOW1YNCCPmBlgKaCDxZD3rqmeklyZYeKWOvybC75WtsBNfw1c2KmVW5MdY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500571f7056c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7963,"size_decoded":7963,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (8359), with no line terminators","md5":"979517482417bab72a87fcb46bb96ed7","sha1":"f6b50889f9e61c0cd733ee8e0a7d4e5019e655aa","sha256":"f151d790cd58c035bfcc7068cc75a49d194eb7bcdd77dd0b92a340c86c380b82","sha512":"17022a92f626395b0f32e3b2c9b118f1923a585431fafd191e01b7409148f554b964c72bc9820d38b43adfce3943846192a13478ecc3e4e1a54d4e637016a955","ssdeep":"192:ohqyi/p47P9y/RARERtRnRARvrouFBF42+AwvhI:2qyMo9kRARERtRnRARvrokBC2+AaS","tlshash":"a80246d5bc55a02a17f7711c7e9f532f7a08b209ba4e58fc399cc16617a54f2cfa5200","first_seen":"2024-01-25T17:30:45Z","last_seen":"2024-08-20T11:06:34.994729Z","times_seen":320,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/_rtc.8634e228.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.708Z","timestamp":1707742687708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/_rtc.8634e228.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-2fbe\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=SG1UA46%2BPRS29qZQrtUq3SBEKgCkRGL9lhnb7UbMcmfTbWsdYhxA3C823vh%2FLw4gVtfZX2Bvjaawq%2BV%2BmaQ7a9Vp8tgH4bEoii1n5J%2B8zGJq5pw13HwfHjJFUj6XtzADt5v1vzM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500560e2856c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12222,"size_decoded":12222,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12222), with no line terminators","md5":"c0eec32a72945a12dbff576ba23c7fcf","sha1":"a74b9b50117673d63563bc1f282550876badb934","sha256":"ca2aa7c20c51a36bdc6c807b86aa722a5a0ecb312f1fcca97567dc5b63641eb7","sha512":"e92a37a53e0a295755a44a2ad3988faec9fe43293080981421008bc8990bc4dcc70c5a6532855d64bc39e6652e8e013927894524b84cbd8fab470df25cae03e0","ssdeep":"192:vMwRVI+QaN+5hLoMlGc+KdKJgtMxzT8IFh6fzM/fy0FRfSV7ZA9f2bE:vnI+jMnqgtMxEInyaaKaVFg","tlshash":"1642c6ae22f8cd068735081dd3c3446367d8d3de860e14a5e9b826816ad2bfc470f9f6","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.386951Z","times_seen":92,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-utilities.js.896d234d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.006Z","timestamp":1707742688006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-utilities.js.896d234d.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-a11\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=RFVx1tom6nWGr1hE2QwaG5L%2B0U1XdsTEITha0fnfpuPqdEnMyhX%2BgFwVybbJ4h4tjdgb5GVn6RUDSqywuKW4iHGpJoKBzjo8jrAGQv3ejOZoTZShuLnioLs8JjOHLEDGC%2BbupXc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057e8ee56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2577,"size_decoded":2577,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2645), with no line terminators","md5":"1f6ef1c622f3812c7d6c0c9d58cd056c","sha1":"817a94b6ae580dc7262f391cb7077d8c86b0b7b6","sha256":"c8f1d8a494e21a9e61690f8d45dc5a9a06b915b2fe8d31b3a94ed989e5c54662","sha512":"2a0313cb642919fd6383ae00f6aeb26e3755e4e78591026ff453c653a5c14626c7fdf1ab4e603d111bc5e0d426fbf634a67cb1572259c9259868442525c472a1","ssdeep":"","tlshash":"9b51b699b0c5f99627ab5ca511bf382ea3bd1850241c4d70a154c8fbacb0abd0277fdc","first_seen":"2024-02-11T15:54:41Z","last_seen":"2024-08-20T09:54:04.388182Z","times_seen":61,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-index.js.f858a42c.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.711Z","timestamp":1707742687711,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-index.js.f858a42c.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=40988\r\netag: W/\"65c9e980-a01c\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6166\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=K%2F0sMxSFoQSgc%2FHkS1r47w9asSOw4F5uE4G%2BfpA9yr8sMjwBP6bpq8MdAFLid4dn5kHplMX9Xs%2FNjkBwas6HDonsmHDMqbZ0Xa2oAB%2BcJtcgD%2Ff4cGx6x1evG82O5eAMgwUv1fc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500560e2e56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40985,"size_decoded":40985,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40985), with no line terminators","md5":"5076b890500d5104cfceaea7962e9e9a","sha1":"9a8cd4cc37f5ccb0864c889d43a24035f314d0a5","sha256":"39d2e9f3c001253e0b419f27647ae70d2cd1ff39c99e3e8408667f97ece002d1","sha512":"901fed03c2d8acc88a4d8f6408c89b4ddb167c810ba582a7a289b32bda8c06b4e5e0162ef4ce2af6908d4c0367d88aa53ddac2f1047fa612218d624502c6f956","ssdeep":"768:+T0aFjqyhdC8WDkY32rGCqaiupWZV4G0htgYSUyPi2u0LnC5Fel9DDV:+zkyhdC8EPupW4GOtgp7j0Y5","tlshash":"6c03d68db9a1f4a603b764a5806f000ff27d6429644e90a4f6f1e4e5bcbc15e9223f3d","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.363741Z","times_seen":77,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-redux-toolkit.esm.js.b9840c6d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.725Z","timestamp":1707742687725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-redux-toolkit.esm.js.b9840c6d.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-2c37\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6059\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=2JJ93r3vLIYsOZS%2BmvBxNxgCRAfLm0SI7dU7Q3qhxlwRbsYXsaE1dJJ8QP7JSDncPNz7%2BJW2MkzcC0Nwmool8hom0a5Tm%2FUFEKboCRgdLsfeMoidcJbb1r0BfSjk6FfTC4%2FRkB8%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500560e3a56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11319,"size_decoded":11319,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (11319), with no line terminators","md5":"8fb7e172a4e94b8503d6c8e9753e6200","sha1":"435a2eb8e4bde051ac5e7405be4556b50c33ad4c","sha256":"67de1922c9275ee52177c86bc298725db162738807f05781c0ed701892037181","sha512":"0b6ce95da378f03e42700c1bc45d84485c00e02e90a2da19a77082bf748f27367cea7b28da5e32d92593777c1ed355a3a4f91d81947188167055f047539b4e5b","ssdeep":"192:Dkbv5YpZYoaU30sakQbM00qFTANRvJGmxtvp2u2luMTvVix3rUhLNdnKOv:DkbOpZyU30saXNZoG+vp29lTv+wZNpKW","tlshash":"6332a4d9b5c1f0b1936779a4803f241bf23a7966784d84609212d8f27cf664fc22bf69","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.381846Z","times_seen":93,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-node.js.6e9d7d4d.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.003Z","timestamp":1707742688003,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-node.js.6e9d7d4d.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-186b\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=B7lczCcigSQtnDWSBf51RkbFo0Ct26g4LyYuYyrvaddDLWFojiibY6oJeCdzP72oXwj1ne2VsoN7WU5538syh06WUR4ULtnpVDqjxmbgHRkux0XhNkGDKKQpLiqqy%2Banggdf52M%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057d8e456c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6251,"size_decoded":6251,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6337), with no line terminators","md5":"7879d1a36754bb3a65fe00bec6aed117","sha1":"e0091d4c04d5c54ebbc9c9100a15a0d6e83df895","sha256":"d52dea76b8ba88b3dfdfe0f256c57b5a95b53913dc115e83337c62fe473a0653","sha512":"cc5c18a50e63b00f44a7b765b8552e1fc7762f0d4c2d2ae7afbdee23b8d37a4b5517365b990b4b19e4fa7607f192fd38c5ba2579048b82970df5953d275848b7","ssdeep":"96:LvkMJqoQCe7/VFgEChfcI72J49lM5t91cthszusEsbhLfD:LvkMKCengEmf2wY1G2uB0Z7","tlshash":"a6d101ca75e0faa206b36598406f211ef33e3c5e405851b8f691d5e2bc30959825bf7e","first_seen":"2024-02-11T15:54:54Z","last_seen":"2024-08-20T09:54:04.370654Z","times_seen":57,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/_core-survey.6514d33f.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.739Z","timestamp":1707742687739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/_core-survey.6514d33f.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=168753\r\netag: W/\"65c9e981-29331\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=v2DfngPmS5XCUXzsC4Aa2Xt8GtzMXLNZ2YqMO1c%2BqUtj1Uko4czgNulU1xTF5HTmkG5Z%2FF%2BpiVImCm4AIknRt5N4sSq5Pmzm4Ax772sUv1Lol6APbFyjWhZKq6HiRx3%2BDtPTT6c%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500561e4756c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":168750,"size_decoded":168750,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-html-to-dom.js.0b382f98.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.020Z","timestamp":1707742688020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-html-to-dom.js.0b382f98.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-16c\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=D67Kak%2FR%2BME8ikALNAZbd9VwWD%2BACZCpO%2BkowGnicbxuUo3Lfv6xtmUOjtfintBcg%2B9%2FiA85wD1V6VkH%2FQDKGYNdlQuLw4xxR29vN%2F5bjH016MEOwDzkh4kKhqWRWL1JHDBxTEM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057f90c56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":364,"size_decoded":364,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (373), with no line terminators","md5":"3796897bf3b99e456f6c9aeded5dbc71","sha1":"8002854a5adf7ddaa5135b67cf6ca497b1b6014b","sha256":"d4582b65a0a8d588a7f1ac7194542b766319f836470daef76637ee32685a36c7","sha512":"dcac0bd2a88a97b9eea3d5c96635b626230541207713140f3d0b606b6cfd508fe0346c735651d9fd7268b669564d2f5405328ad080b1dbb4dde920cf8fa294d7","ssdeep":"","tlshash":"a2e06acd30c03cdc3e23344010e4d402394d30a73d1440f3c79252b8ac3c5591004f84","first_seen":"2024-02-11T15:54:41Z","last_seen":"2024-08-20T09:54:04.387607Z","times_seen":53,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/SurveyContainer.eee0c501.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.027Z","timestamp":1707742688027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/SurveyContainer.eee0c501.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=56661\r\netag: W/\"65c9e981-dd55\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=7rS7vB5TKQ6sODKqzTb7%2BMXmIhjEY9FQad60TR%2FH8OtdmBKJHJKkbobkduigx46uvptyajf%2Fti%2BlR0jbL%2F9ioPQwc3e79Wtn2a3EchsUlOYY7%2FNjXBYjDNkEaDeYRwQUzbuBHG4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057f91656c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":56658,"size_decoded":56658,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (56658), with no line terminators","md5":"6ee0c2c6954a7863293c05d1e3e32726","sha1":"cff71ec620431ee0b63b051a4a769ca51e8cbb80","sha256":"054074bf6fa33c788c45ed5007ba27d5ed4693ac3bb9a3bd003accdcc5e693fb","sha512":"2e14fae894bc2c960437d7f08e9c49384cf9ebc942e125af8b9b96345e19a137f5d52d6db25f6c739c19518c19985e9feeba802cb03874416370d4030d491aa7","ssdeep":"1536:h1Fp+sBmHUHa472ioHZrfhjahR54ROMOUhWk:JaOgzhj2Ru","tlshash":"c443f788f991f06942f7246e613f4207f3b02659a2add450b121dce4bdb8d4fa53bf1a","first_seen":"2024-02-12T10:59:29Z","last_seen":"2024-08-20T09:51:04.821668Z","times_seen":35,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-1.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.319Z","timestamp":1707742688319,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-1.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1122\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e981-462\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=FP7H5DJqKsVI95IMZp%2BTimzo9bQs%2F8QJSjboOXcs%2FwyjCdcsLpKxaVOgammx5tPO9OIt3w296Ua6O%2FRwIrOVl6DLoV9%2FXvGFU%2FOopegGRXGAu%2FuBrIdYQvPUSdAVf1e7C6dZgsE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500599ba056c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1122,"size_decoded":1122,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"56441eb05774cd7ed15d829e06947346","sha1":"25649e1ed3820d97bd8bcdc737974e0c65adc1aa","sha256":"5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02","sha512":"af24d309084ad2f38b1de4f3e3244a50b402f68e0b9b0a2d118d2031e467bc3a2bec32c4e1a09230182f6b76dc1f2deaa02fa0273e1706bd1334025c3016cf1b","ssdeep":"","tlshash":"5821ca9c28f70cd8bdd6f46503405098474db279431497bba8e15acd5b404de7015ccb","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.135289Z","times_seen":7744,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-2.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.335Z","timestamp":1707742688335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-2.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1104\r\nlast-modified: Mon, 12 Feb 2024 09:48:48 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e980-450\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=67ZQaVnRC8LHHNU9WndJ2y81%2B0EOTqodOPLb6xPYV%2BZcIc6lbrKUwTQpGPqYQvBsifZacE1Y0KdM3zRJsphsa%2FMpOINAfCM%2F5N1k6ecjXlHIhpfNDzO59mjUOt%2FcxywioI3dDIA%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059bbcf56c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1104,"size_decoded":1104,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"cd20c1e86fd66d301b6e35a97af461fd","sha1":"3f92712ef775681d59dfd96bb9b6429227a944e9","sha256":"0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0","sha512":"2aee2ab7c62af438a017b5f07a9b53342f70813c014234d8ca2791d2cfd5a2935b14c74633595a6ad457df7490b77ec5eefe702e9e10c24e0680f7ed7801588f","ssdeep":"","tlshash":"c911e92db60e74b3776fe3294366a7405c34cc924692a3ca69954f0872c47cea6522f7","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.136834Z","times_seen":7693,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"my.rtmark.net/gid.js?userId=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe","fqdn":"my.rtmark.net","domain":"rtmark.net","tld":"net"},"ip":{"addr":"139.45.195.8","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.858Z","timestamp":1707742687858,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rtmark.net","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Sat, 23 Dec 2023 22:43:24 GMT","end":"Fri, 22 Mar 2024 22:43:23 GMT"},"fingerprint":{"sha1":"41:21:53:7F:A2:C4:68:B1:CA:BC:47:66:5D:3C:CA:96:45:5E:71:15","sha256":"D1:75:5B:07:12:7C:FA:BB:1F:A9:1A:ED:B2:0F:28:78:7C:44:CB:B9:1B:54:7E:48:65:BC:F6:74:3B:12:E3:FD"}}},"request":{"raw":"GET /gid.js?userId=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe HTTP/1.1\r\nHost: my.rtmark.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://googrootsurvey.top\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 65\r\naccess-control-allow-origin: https://googrootsurvey.top\r\naccess-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE\r\naccess-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token\r\naccess-control-expose-headers: Authorization\r\naccess-control-allow-credentials: true\r\nset-cookie: ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; expires=Tue, 11 Feb 2025 12:58:08 GMT; secure; SameSite=None\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ntiming-allow-origin: *, *\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":65,"size_decoded":65,"mime_type":"application/json; charset=utf-8","magic":"troff or preprocessor input, ASCII text, with no line terminators","md5":"52a135927df228db9179302cf1e03318","sha1":"f06e9fb55fad808a57318c226ec44c64a85ea620","sha256":"e48703721764d3aa9783bacfd81e1d2f4c233ff7b6cfb5b06a478ca72b362ac3","sha512":"03d12fa117f551e950d76f71282bd00d10b8254d09f4da9ec0306ea9fb19da864232e7b75aaa6e9e4e87662f6e1030b34434210be00ae2f4e02ad9e716e73331","ssdeep":"","tlshash":"c9a02220ba2c828ae2002a082bf3ce82a00022a00b00ae2002ec000320c2bfc0ec3300","first_seen":"2024-08-20T09:50:29.002593Z","last_seen":"2024-08-20T09:50:29.002593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":143,"dns":2,"connect":43,"send":0,"wait":67,"receive":2,"ssl":94},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/config/comments/en.json","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.996Z","timestamp":1707742687996,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/config/comments/en.json HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65c9e981-11aa\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=vSCyjvxWEpF64EiyuHyGmE3%2F%2BMSxghApq0wXdJ%2B1a1B9m9%2BTSoJ8VOUhIRrfEvM6SXrFbXoygjw8unteDCj9z9X1%2BZko9Rlhs87eEQ1GgRUlSCUFQCO6x195tqTK1dw2s9bpi4Q%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057d8de56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4522,"size_decoded":4522,"mime_type":"application/json","magic":"Unicode text, UTF-8 text, with very long lines (5173), with no line terminators","md5":"50680109e350a76b2bb8131cdaeb735e","sha1":"0c14dde15f13c0deefd1ff3eb8c4608e73d133b6","sha256":"a9ebf6b7ceb48bd6c63b99320183934f2b183af64cc7f27fd85ebe7191d92e42","sha512":"62df869b4c8b1bb8dbb4fd8c78f5f3a8444beb0427348af0bd5e59ff8e8875c547923a41c2c96332d37ab8130ad0268340cc2b1fcaf31bdd5fa9d3c3cf608b70","ssdeep":"96:U9noMNrrF3o1VW6S7HHjotaw210v/9dnpj0:U9noM1rF3o1QzDHcMwa0lRi","tlshash":"fdb1bf1dd8415e3143d4aeb9bc3e1cf36ad536cb04b481ac3cccf22f5b8b964a18625a","first_seen":"2023-08-28T16:10:04Z","last_seen":"2024-10-23T15:52:38.292922Z","times_seen":5471,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/_each-land-config.2585c54c.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.727Z","timestamp":1707742687727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/_each-land-config.2585c54c.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\ncf-polished: origSize=71720\r\netag: W/\"65c9e981-11828\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 6059\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=S%2BZAebu9i2chJsFxwhR4bk3RMEGQIvz2MYQ0bm13x2U6Gfwlan6bAIWH56TlGA70EWSXQ89CFnm7HjBgaogC9PjPBrfQvQeTYTtspMkYgRxSgkIN%2Bu2gk1nJ9yf563k2pdIwAdo%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 854500561e3e56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":71717,"size_decoded":71717,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7aeac02c3c0282e729d544e7cbcb0ab5","sha1":"db56aeb84c9ebc3d27c6d9d5feccfeeb8f126ee3","sha256":"e7621fac5eea193280e9763009d9204668333e340c0b865f6a490d3ef324ddb3","sha512":"b4e3fe31fb00267dd43dad003ea8aa294ac4f3fd0a0df4e09bcaf22679ff3512c3face06156439989ad0b29da6744694a9735dd8bf144cbd030d73b30cfd8051","ssdeep":"768:waxFgYynzCneXrkjjtQwt1h0OHMjjtQwt1h+6pux2eXzpcfaEsE8tcW3qz3LbP7Q:waxFgatLpHCtLGjJqfafF5+LXaYjY3","tlshash":"8263b78c7685f0a902f76179452f6317f23a6a66644dd050e212e8e07cb8d8fc527fee","first_seen":"2024-02-11T15:54:39Z","last_seen":"2024-08-20T09:54:04.2594Z","times_seen":43,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/favicon.ico","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.843Z","timestamp":1707742688843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/x-icon\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65c9e981-47e\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=ZqKPPwg19ZqC4sT15jsuPLB5%2BtKxWmIkF2%2BJxrgaGVgLfS4AsZigSktKS1H8U59RHc%2FE4C7RZWAt7cm1YrrzUCgwE4P%2Fd3BROe12YXgx3%2BADB2OnQ8K9xay68jH%2FxmXmtfQKR4I%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005d49e756c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1150,"size_decoded":1150,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel","md5":"668ba1a9fa1890ba16cb8adc28d3dad8","sha1":"5e35223b2541265114eaf61b9da2556c812fea17","sha256":"7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2","sha512":"212aa3e6ea6a2dd1abc10d4a96b7be179e0e490da187641ae3be7b7c0c30b7272d8d5b37b1c6ca5c75732dfb35a8ee30fa97cdb35704b97eeee11a2163e53664","ssdeep":"","tlshash":"ed2121f12eb0ac91d1e71a7a53305ec153a560a6deacda43b45c0d721d2542b858f76c","first_seen":"2023-04-14T08:40:43Z","last_seen":"2026-01-05T06:12:38.212902Z","times_seen":33252,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/v-index.mjs.4e8a04d0.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.001Z","timestamp":1707742688001,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/v-index.mjs.4e8a04d0.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-89d7\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=lo3tk1PLJeJviqjg7%2Fr1BWPBxKxaUBwIvnAw9O2vAUKyxn2QdOKL0ygHn%2FDb9OPgm4O9b1ilZPhG5HAKPrknXhrCE1QvKjTy9dxx3aJUWrJR%2FTNRpCS9bhOAHP1uz0861%2B55gwM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057d8e056c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35287,"size_decoded":35287,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35287), with no line terminators","md5":"05c026a07b4d38c32fbc781479ad6a12","sha1":"24a137767f69b3313b10dd83e4a6a2eb2eff54b1","sha256":"0248ebc73f99ea485ea6b809f2a574e91527016decfb8f8a96b28819201467b0","sha512":"947e48e087c97171003cba2e7dcbdc7095897ece80ed8963006c0aa8e7e36163d8c77257c588f9f86ad56112dfc4f0d3a44fb498fa57e4c152832ede4e198cb4","ssdeep":"384:DkX1PJUZR3UCaCPMCzadYhKdAxC7dQ0QdQh1uvdAvINJnVCqGqm:QJAuCaC0CziiSOGTsEoFnVCP","tlshash":"1cf28488b291f4b242d7a166803f450bf279685570ae9090f336d8e1acf95df8177f3a","first_seen":"2024-02-11T15:54:40Z","last_seen":"2024-08-20T09:54:04.389264Z","times_seen":90,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/rating.cda2cefa.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.146Z","timestamp":1707742688146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/rating.cda2cefa.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-14bd\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=nHe7237qj7E03OU%2BXcK0y4gP7d77mdST9ogy0695FF%2FdrPvGpWU%2FphKO0NQV2Htf3KSrfko08cLBATUEsvK2aR0hklrGUI1qOwM4tXZgOJYVTNTTy3YrjNjnZpyGio%2FBBw5Fy8A%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450058fab656c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5309,"size_decoded":5309,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5550), with no line terminators","md5":"740dfb6e64592bfe109c574b463c4dbb","sha1":"0abc00b4395830d668db09bf9be87e30d0a40489","sha256":"77c6a2251b6275d03f46e84921073374510bb50f22001faaea5a118179f493a1","sha512":"2a1cfb7978bde62c21b2802cf76396da532bb8fafcfaeb5ba7f520c56313621b7de7ff7a630da2b7e465e6d737a6821e8af901d190bfc1636b6b7cd44a57e8fb","ssdeep":"96:LvkRcXUTKCPA+IXNxIF4lE1F3qcShOrfyJXbR2vccJ/:LvkaEuCPA9XNxIF7f0OrfEXtEccJ/","tlshash":"edb1208eb865e01c866bb06725ff1738be642b09fd68042495f4dc1cf4a6e885b34f2c","first_seen":"2024-02-11T15:54:54Z","last_seen":"2024-08-20T09:54:04.367976Z","times_seen":13,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/pfe/current/micro.tag.min.js?z=6679100\u0026sw=/sw/sw6679100.js\u0026var=6070194\u0026var_3=null\u0026var_4=null\u0026ymid=2256\u0026cdn=1\u0026domain=ofklefkian.com\u0026ab2_ttl=5184000000","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.971Z","timestamp":1707742687971,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /pfe/current/micro.tag.min.js?z=6679100\u0026sw=/sw/sw6679100.js\u0026var=6070194\u0026var_3=null\u0026var_4=null\u0026ymid=2256\u0026cdn=1\u0026domain=ofklefkian.com\u0026ab2_ttl=5184000000 HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65c9e981-6a26\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5097\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=NnGtcmUvFKrvApsrXyGO4c5ZaZP91anYhtKjYa3gpYim%2FISNLuMPznX87bbysm%2BE4WDs8VtM3zSOQnodHjmrxhliEd77iCdtPNjQxEcOybBMyFeLNTtl%2BSrulRG0RU96sW%2BHjnc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057c8c356c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":27174,"size_decoded":27174,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (27174), with no line terminators","md5":"75c26ccd65e96e912725399ff3ce66e9","sha1":"d300939979d2048844dc5ac80c51ed8121126f4e","sha256":"c9db5c92934b273ad485c58710d6fbc2d580c2923a99bb456b18cb5e1465f5cf","sha512":"c1eaed428bfdee457d560cd1587f552c84c42a46f9543266f9db41172b0ebf8404922b4138fdf345bea49df99c064e29664c131aceda539a686940cebd78b040","ssdeep":"768:4wLA93uYOAihN2lHY/dAAlTBHmQeTM7f3/LWm0GllZKKBR5:p5lllEKoqlZdv","tlshash":"eec2f9de75dd64a5f6c62645403a13c4fc7eb222bf2f9c81981e2d5b25133c28ab2ed4","first_seen":"2024-01-17T10:52:24Z","last_seen":"2024-10-26T20:44:51.323929Z","times_seen":3178,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/img/comments/person-5.webp","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.420Z","timestamp":1707742688420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /img/comments/person-5.webp HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1846\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: \"65c9e981-736\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=b9UfIze%2FPtcbF8pEdUDRHitpJj8G3HcggOQo9%2FuF%2BRR9QbgajY%2BDoWUVJrMslq3HoN%2BJ7fzl2nf3DWdwsix2hCMPCyhkfdJ0K%2FvY4WpAfs62%2FshmB3L03FPyYtxHV%2BA27si51U0%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450059ec1956c0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1846,"size_decoded":1846,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"10f4b15b0a471e17ef598de73ffb319b","sha1":"e3fd3478fa27f2cce0a9b945c50d640832594594","sha256":"21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378","sha512":"2344943d8499fdb7635b44c896972112ca9c274535fb69486f2e8b6ec399f8e03fec4fcbc1dd69b60d1f50be845ea4ef83c0cf800aad16fd6ec197659620cad0","ssdeep":"","tlshash":"ee31f9dc129f50a1fa9878a88b701229b05275b4851163424fbbaf713bc574655ee3cd","first_seen":"2023-09-15T15:50:03Z","last_seen":"2025-09-14T15:17:25.137556Z","times_seen":7700,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/pfe/current/stattag.js","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.674Z","timestamp":1707742688674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /pfe/current/stattag.js HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: OAID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe; syncedCookie=true; oaidts=1707742688; ID=hm2z4q7nvtqx0hvybk7xjvbgfhmeqooe\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-type: application/javascript\r\ncf-bgj: minify\r\netag: W/\"65c9e981-4a6d\"\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nstrict-transport-security: max-age=1\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\ncache-control: max-age=1800\r\ncf-cache-status: HIT\r\nage: 5098\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=nS7cZ0wWYaYSA4qTyj%2FAASvPbl9Q%2Bcg4o8UQpWoelvjA3Y8D2yhhaMrRInzQSelxW3V2A278VhaUWqv1p618BqDg%2Fe6jOo09hIAD4tR5iCbIVHVdME1HDALNAecGbB9cEexNbXI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8545005c383d56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":19053,"size_decoded":19053,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19053), with no line terminators","md5":"3a74216e872211a9c770302bb7d4a63f","sha1":"7e63556174a7d66eee407218e503ec0aae2c0f9e","sha256":"03405209d89a927b81d53eb13968663069760776389c5400bb79d11bd9f78f78","sha512":"a65668e0749eba0255a7a72e04e128de1c8f4e86ba7e0cb31a2b6ad7a85f064208f50308dcafe15df07af68229987de02c1d2ecb51db9c3a65b6b8ea9cdb36fc","ssdeep":"384:VYXwc44eBbfKuxEHWEr1XdK2LWqHUeNpyE0kA0tl:4w4iKxVrRNWZKdA8","tlshash":"9782754db589d563ba6231a526ff2509aeeeb5710f2f6c49c2386cd039b92cbd103dc4","first_seen":"2024-01-17T11:23:44Z","last_seen":"2024-10-26T20:44:51.317412Z","times_seen":3714,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ofklefkian.com/zone?\u0026pub=0\u0026zone_id=6679100\u0026is_mobile=false\u0026domain=googrootsurvey.top\u0026var=6070194\u0026ymid=2256\u0026var_3=null\u0026var_4=null\u0026dsig=\u0026tg=1\u0026sw=3.1.472\u0026action=prerequest","fqdn":"ofklefkian.com","domain":"ofklefkian.com","tld":"com"},"ip":{"addr":"139.45.197.251","port":443,"asn":9002,"as":"RETN Limited","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:08.133Z","timestamp":1707742688133,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ofklefkian.com","organization":""},"issuer":{"commonName":"R3","organization":"Let's Encrypt"},"validity":{"start":"Thu, 25 Jan 2024 11:36:43 GMT","end":"Wed, 24 Apr 2024 11:36:42 GMT"},"fingerprint":{"sha1":"E2:4F:E5:BB:A9:86:E9:9A:42:9D:EC:91:F3:0A:AC:0A:CC:89:3B:12","sha256":"57:4B:36:54:B2:88:5B:A3:24:2E:B7:AF:0F:45:54:FC:15:19:80:3E:C0:FF:84:42:3C:53:5A:4A:57:1E:B4:65"}}},"request":{"raw":"POST /zone?\u0026pub=0\u0026zone_id=6679100\u0026is_mobile=false\u0026domain=googrootsurvey.top\u0026var=6070194\u0026ymid=2256\u0026var_3=null\u0026var_4=null\u0026dsig=\u0026tg=1\u0026sw=3.1.472\u0026action=prerequest HTTP/1.1\r\nHost: ofklefkian.com\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: null\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 12 Feb 2024 12:58:08 GMT\r\ncontent-length: 0\r\nx-trace-id: ccf20751989a0a0d06a9ef14a5387a56\r\naccess-control-allow-origin: null\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-09T01:14:03.372909Z","times_seen":14866950,"resource_available":true,"data":null}},"time_used":316,"timings":{"blocked":115,"dns":1,"connect":43,"send":0,"wait":48,"receive":3,"ssl":93},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-02-12","alert":"Sinkholed","trigger":"ofklefkian.com","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"googrootsurvey.top/js/config/dict/cookie-consent-1.json?v=10","fqdn":"googrootsurvey.top","domain":"googrootsurvey.top","tld":"top"},"ip":{"addr":"104.21.20.53","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://googrootsurvey.top/finance-survey.html?z=6070194\u0026offer_id=9540\u0026var=2256\u0026ymid=65ca15df8d67a40001bc98bc","date":"2024-02-12T12:58:07.913Z","timestamp":1707742687913,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"googrootsurvey.top","organization":""},"issuer":{"commonName":"E1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 22 Dec 2023 08:01:28 GMT","end":"Thu, 21 Mar 2024 08:01:27 GMT"},"fingerprint":{"sha1":"39:41:BF:3D:26:67:5E:8A:73:DF:0E:94:CD:3E:35:D2:D0:D0:28:D8","sha256":"82:17:04:44:E4:89:BB:57:E3:27:42:AE:52:78:10:25:17:14:0B:E1:F2:E7:3E:99:D7:01:74:CB:85:63:B4:04"}}},"request":{"raw":"GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1\r\nHost: googrootsurvey.top\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 12 Feb 2024 12:58:07 GMT\r\ncontent-type: application/json\r\nlast-modified: Mon, 12 Feb 2024 09:48:49 GMT\r\nvary: Accept-Encoding\r\netag: W/\"65c9e981-1a65\"\r\nstrict-transport-security: max-age=1\r\nx-content-type-options: nosniff\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v3?s=iBCjKiJQPVrB5K6gV1DFAqdc0dFgBzIdhWNtZvpNObs4%2FPLUbVTi3N4La%2Bp%2B9IKrwimNnWw2K%2BWudU%2FiEithXUnMnAB7gm8oGHko7kJjM4Qc8PPlCP98M8t1G4lgpejG%2BCwSuCU%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 85450057785f56c0-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6757,"size_decoded":6757,"mime_type":"application/json","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators","md5":"4b2ff958e811a50d2f641818590b443d","sha1":"6abae297812bb55fad869e953e7fdf7469cbe1ae","sha256":"9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8","sha512":"f228516fda8b444cadd6cc538188a33a7324ecce652ffc372009908030945ff5e7af6aeb56ec65811a5699fcdf1c42201429d6ff01ad3b31f5a6953fbb10faec","ssdeep":"96:hrINoxmmmhTWhUutYq7DgBNzFicQesg+aa0YL25Q6kGorwRUakHBg:NIN+V2oWAUsgtPYIV9","tlshash":"fae1756c89ecafbf03904a909d9271b5b2c62df46691b18d1c61753f0fc732b8c251a7","first_seen":"2023-04-10T16:01:59Z","last_seen":"2024-10-28T12:23:30.849844Z","times_seen":19879,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}