win.canyouwin.online/go/547f6e26-7e42-4c9e-9c5c-739d3f8a9fe5/
3.70.16.242 226 B URL win.canyouwin.online/go/547f6e26-7e42-4c9e-9c5c-739d3f8a9fe5/
IP 3.70.16.242:0
File type HTML document, ASCII text, with no line terminators
Hash 9766576f2fd9d91170e63517d0a9ebf7
97c7e0af08704737fd40d0b5eca5dce709acfb24
5d650dc76b82376b5014e82792c49fd717800a4ba2ddc8b555c2f4898a826cc6
GET /go/547f6e26-7e42-4c9e-9c5c-739d3f8a9fe5/ HTTP/1.1
Host: win.canyouwin.online
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Thu, 01 Jun 2023 22:26:56 GMT
content-type: text/html; charset=utf-8
content-length: 226
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
location: https://retryngs.com/link?z=6007685&var=%7BSOURCE_ID%7D&ymid=ECSjotcXgtbccBpo6Rfwyo
set-cookie: bemob-uniq-visit:547f6e26-7e42-4c9e-9c5c-739d3f8a9fe5=1; Domain=win.canyouwin.online; Path=/; Expires=Fri, 02 Jun 2023 22:26:56 GMT; HttpOnly; Secure; SameSite=None
bemob-rotation:547f6e26-7e42-4c9e-9c5c-739d3f8a9fe5:random:68ae9872a5f7fa28f2397a74867fb8f7=0-0-2; Domain=win.canyouwin.online; Path=/; Expires=Fri, 02 Jun 2023 22:26:56 GMT; HttpOnly; Secure; SameSite=None
bemob-click-id=ECSjotcXgtbccBpo6Rfwyo; Domain=win.canyouwin.online; Path=/; Expires=Fri, 02 Jun 2023 22:26:56 GMT; HttpOnly; Secure; SameSite=None
vary: Accept
x-response-time: 19.141ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
retryngs.com/link?z=6007685&var=%7BSOURCE_ID%7D&ymid=ECSjotcXgtbccBpo6Rfwyo
139.45.197.249 0 B URL retryngs.com/link?z=6007685&var=%7BSOURCE_ID%7D&ymid=ECSjotcXgtbccBpo6Rfwyo
IP 139.45.197.249:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=6007685&var=%7BSOURCE_ID%7D&ymid=ECSjotcXgtbccBpo6Rfwyo HTTP/1.1
Host: retryngs.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 01 Jun 2023 22:26:56 GMT
content-length: 0
location: https://trebghoru.com/link?z=3956710&var=6007685
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: e3c47ee5d81043b36e376a039ded79e1
link: <https://trebghoru.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=0c0ae80c37d14a9a89dad49fb831661a; expires=Fri, 31 May 2024 22:26:56 GMT
oaidts=1685658416; expires=Fri, 31 May 2024 22:26:56 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
trebghoru.com/link?z=3956710&var=6007685
139.45.196.64 0 B URL trebghoru.com/link?z=3956710&var=6007685
IP 139.45.196.64:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=3956710&var=6007685 HTTP/1.1
Host: trebghoru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 01 Jun 2023 22:26:57 GMT
content-length: 0
location: https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp&autoexit_86400=3953544
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 7363fbac8632ccf0e754987ca19ab0cb
link: <https://erailsiwsurvey.top>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=13ef8ea32bf74149801c53a373020b78; expires=Fri, 31 May 2024 22:26:57 GMT
oaidts=1685658417; expires=Fri, 31 May 2024 22:26:57 GMT
OXCCLK=4105106.1; expires=Fri, 31 May 2024 22:26:57 GMT
allcnt=1; expires=Fri, 31 May 2024 22:26:57 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/_each-land-config.c1df2b79.js
104.21.55.218200 OK 20 kB URL GET HTTP/3 erailsiwsurvey.top/js/_each-land-config.c1df2b79.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6b75c51d58a8ab1832c0c5167c09e04a
3e201ff870f80d120522c2f58a9f4eec0c4eecb2
7790285885c82a7264b458e8c364358aacff59c0e7aff4e60776a5704cea3a36
GET /js/_each-land-config.c1df2b79.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-11824"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H5tosI8KkwgrYKKJYkAPqxNzZjcaswuJ17DH2PVzJPYkr3YpBNsmi8jrtUtF2LQJcnDr5eRgP%2BNCWS4rFSI0Lx8%2BCaBc9jnlQ9IbrRloOErAknVzDbLQSHvQQwQBfn5Y11kjhxk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1977cc4b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
104.21.55.218200 OK 1.5 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (7118), with no line terminators
Hash d0895c16e97f4fa5d6c7703b741a4a5e
8a3c26b1a516b4716799ab6e806bf063ba016651
11e8791573303e203816d632bda1b06fbb360ef05f7c303260e451428093fe2a
GET /js/config/data/sd-1779001.js?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1bce"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 5575
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r4FEdhEpTlxg%2FIDnIOwwQgiq1b%2BlzZ0jjEzeikFe8ek3PxQggtcGs5WllqEOWfKu8txi1HpBqvp%2BoLMAooEAz0fWM6paOi6dVlr9H%2BJ14DnkPNp8P0xcxoFKw2GoScUO3%2FdhItg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae196dc25b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?
139.45.195.8200 OK 65 B IP 139.45.195.8:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type JSON data\012- , ASCII text
Hash b7b8d59da3d58c9f37699f6a608612ce
af121d137d00ae367c8f5e8a9a0d88715bb780d9
d662abdde8a17872ba1894237660bcefc6c9c988add03422d2c61b4da6ddd0fb
GET /gid.js? HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://erailsiwsurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=2eb91e4891724a93a3ef12162c3d346e; expires=Fri, 31 May 2024 22:26:57 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/v-index.mjs.7a6f6513.js
104.21.55.218200 OK 8.4 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-index.mjs.7a6f6513.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (35051), with no line terminators
Hash 9f7ddd785647e7de7ff506bbe6ec7ca7
b04873210640ef785259fb4405f01c5e6f96d5a2
10338634d2cfa9fec434ea07a265687bf552d382e11b107d7afe649c05ac5627
GET /js/v-index.mjs.7a6f6513.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-88eb"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mULTOVBVJ%2BmoybSFoU93ZFpc9zcOJlrYZHhgecmf1R0hAR7dL2bBVNlOhJv5HxNkyvH72zO%2BHiBzzn%2FfRncw5eagnLEQKuJ0LtpJ2gQ59uXExiiNRQ30uXGvOka2yWIr41DDP8A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1977cc8b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-redux-toolkit.esm.js.b2bedd2f.js
104.21.55.218200 OK 7.6 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-redux-toolkit.esm.js.b2bedd2f.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (11317), with no line terminators
Hash ac9121dfc38a96f9146a7121ce322045
06ccd82f9b12b0e28763513da15d61fce4b9197b
2994e8f29a919a18deb772d218fe3fb77e45df892ae6512d448f8d862e2b3a71
GET /js/v-redux-toolkit.esm.js.b2bedd2f.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2c35"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FBLuI6QF6kFaTgIY2IBN%2BRpCjiX8cr%2BqQBXDlcB4mM2u4yBAwxOwBtyo6JbPkNXtq713JajyoYlbfzSwOj90NYp6e%2FATp4frbNvJvp5XAmYNnqhXpe6%2FkX8qypoUXbppP1Cphm0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1958ab1b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/unnamed.jpg
104.21.55.218200 OK 1.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/unnamed.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-562"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rULIw%2Bz4utleSkm7Hs4jl3%2Ff8xaw3MSPjyS0%2F1JAyvVOe6DoE7XHaRmGDgLZ5Mst2DnI%2BY20ijgWvyJ8cB%2BlCc7Fli7vIm547G8D78zFjsCnJ2TCvsAZnJqECi1CYuQCcLyCbhY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bef5b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/css/survey.2bfeef83.css
104.21.55.218200 OK 21 kB URL GET HTTP/3 erailsiwsurvey.top/css/survey.2bfeef83.css
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6478a1ef-1041f"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jB%2FlFd3ePLW%2F5TmxcpiZ5QXGyD8rtusIIF%2BF19WYuAupxYoJKRt27RzfVGefR7mcnxkuTU3RFkmQJyfxfa6d4qHzOhqRLKltqQm%2FJCfI7smqTW9OHf%2FV5Dir8QODd4vBrfP8cL4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1979ce3b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-2.png
104.21.55.218200 OK 6.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-2.png
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 3e6eaea87b2891590972dd11373b09a3
f038c6e6306ca708defa2b601bf9477f0cf78a3d
15aadd2e7f4f83e79f35e760da382fb8b5045d2cf506f531bdc15b7b27f699a5
GET /img/comments/person-2.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/png
content-length: 6428
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-191c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GjS2kvOfhAxPEZntFbpDNP1jGmenN1hxbJkyCLvdoambg5oUWdwX9%2FEOHnBVzayLy8EcapCQk5ChiOrj4uCoNN0IbZEVOp7arHHgC7SnDtSwRosNJkym8O6EDQNoiwy6jutHw7w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bef7b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-4.jpeg
104.21.55.218200 OK 2.7 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-4.jpeg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 6cf64555e2de0ff8b5391081b648b89a
a32008bacf7f8cd3859eb86c6c8d36eeb15dbdf0
d4f513bf3a5691b900739cf79285d18ef09ef4b81eca648261b15a693d21818d
GET /img/comments/person-4.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 2709
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-a95"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tZXytvgpqVgZ6I6NBPbo9QDKszr7XDZOW8izjvI0H9INCX3c%2F3WzbFbCtclF%2BP0DE9Jqp3sbeR1IoKnsUYdtHClJHnjosLcNgKz0clrn3DubviUVbn70CCCrkYJ2PbsfwBJwxa8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bef9b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
104.21.55.218200 OK 5.8 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (7118), with no line terminators
Hash d0895c16e97f4fa5d6c7703b741a4a5e
8a3c26b1a516b4716799ab6e806bf063ba016651
11e8791573303e203816d632bda1b06fbb360ef05f7c303260e451428093fe2a
GET /js/config/data/sd-1779001.js?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1bce"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 5575
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S5mZL8kEizNQZVGOU5MfARkeI3evQ5PE6pcN%2FfNAvIxZQ0tZzE3ScU2FK6DErNaFmBCoowfbptcLjBJVJyHl%2Bq%2BUZoxQ3zuv0rRP7Ncie2JP5iZQGptI1yV3jOr0XYf4UwAqLM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1984d6bb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_each-land-config.c1df2b79.js
104.21.55.218200 OK 37 kB URL GET HTTP/3 erailsiwsurvey.top/js/_each-land-config.c1df2b79.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6b75c51d58a8ab1832c0c5167c09e04a
3e201ff870f80d120522c2f58a9f4eec0c4eecb2
7790285885c82a7264b458e8c364358aacff59c0e7aff4e60776a5704cea3a36
GET /js/_each-land-config.c1df2b79.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-11824"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QMFcqgjuVL1MJnLTDQVZQMzN1noRsyMR%2BlGPi8GNBa7cXkvae9j3VkIw%2B9BsONSmvy0ZHNpkZRhg8QAXLmZZc1D2IJkDLWhgBxw2OnWblTi%2BJLO5GiwVuh0CcWHWMTcSHPJmH7M%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1959ac7b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_global-config-sd.2d740028.js
104.21.55.218200 OK 6.5 kB URL GET HTTP/3 erailsiwsurvey.top/js/_global-config-sd.2d740028.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (1410), with no line terminators
Hash 15cb25fb388b6ce841d68c478a48f0c9
cc2ada5f0d6b7fa5d79c487315e08f36f14918ad
09c4db6fcdedb3623e653fb0660b495d4fe28db67ca358fabfbec1c8fe297ca9
GET /js/_global-config-sd.2d740028.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-582"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=stORdpIWITVPAtWP72Gvk4fyilnCozhYg8BWXc8CjZ4BMT3TlikFnr4ypKmPmb8LKXX3KlA%2FnZWxAAt02bu6Vp5quHtZ1Rsc9FqqXkW80Uwuh88DQFSq7hl%2FTmdaDuJ2k1NAO%2FY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1957aabb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/survey.36a8ba6b.js
104.21.55.218200 OK 7.4 kB URL GET HTTP/3 erailsiwsurvey.top/js/survey.36a8ba6b.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (5437), with no line terminators
Hash 6ab7c487e6ed70d2f7241a5bf22a69f4
aea57164a36967cc918348e3117662c883c0ef10
8b44578bb3662e18c2c7a6972b9efedb7daeeaa4a87695dd5c912b1ccd897a9a
GET /js/survey.36a8ba6b.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-153d"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z1MtYLRvb2lJiBz6dehCT790d18a6thZxM7WKuemWiV3eCES%2BaVwMFXpROAmMt5F3xoDDTOMWn98K3X5eTXkauaNoq%2FLLzQF2b6P8jEOuGeVchHUymgOezJV2XJdS3QViaiLMqw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1978ccdb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
104.21.55.218200 OK 8.8 kB URL GET HTTP/3 erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (2572), with no line terminators
Hash 2e9de7b6778ce3f6199aebfb661f9523
891c3fed1af8c7713e55934831bacd3a3b595e3f
1fa9bb8f2331f7b0dadd0d87aa97c1077cb70f5b2149816f931a5dddc65a8ab8
GET /js/s-storageService.js.2dc48dda.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-a0c"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hwN5TbT9ei5bqmIfReMKprJn8EsoXyV7vBC0CwcxIQ5gDp%2BVtlouUaBGisXOeezKJ%2F18sBMkecr6ZwkIxHmcXcD3iMQhPsJ3H1PDoWK1f%2FaBZbES8WAG8TJf1hWMFUj8aX1G2uk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1958aaeb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-index.mjs.7a6f6513.js
104.21.55.218200 OK 13 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-index.mjs.7a6f6513.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (35051), with no line terminators
Hash 9f7ddd785647e7de7ff506bbe6ec7ca7
b04873210640ef785259fb4405f01c5e6f96d5a2
10338634d2cfa9fec434ea07a265687bf552d382e11b107d7afe649c05ac5627
GET /js/v-index.mjs.7a6f6513.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-88eb"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HRLfnk2bDQaxtxyhrV6Wz%2Fwm67QzxEYi5k2JQ74z4t%2B9cpLYBz1gUElUS3basAMIBtk2wnh3mvw%2BjTSxhwE4vqFQ1cuEipXRRlrUOWy%2FhUA1cnWEfT0ArQ3Z%2FINF46EqdJY3%2BVY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1959ac6b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/css/survey.2bfeef83.css
104.21.55.218200 OK 18 kB URL GET HTTP/3 erailsiwsurvey.top/css/survey.2bfeef83.css
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6478a1ef-1041f"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LKaiCFkHWdlIgEeCPpE1Ny8ApC6UWCdYZrppQShvG%2BZ4%2FLT5GnGtfIuXJFKtyhz62ErJrk6d7akideoMjCNMIbIX6ZVBPgDPD%2FhfncvUBzDQQKQPFx9uP06qjponJeyZ%2FUXYy4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1959acbb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-11.jpeg
104.21.55.218200 OK 4.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-11.jpeg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 3924bdc784dc4947f52b779aa4d5a0aa
1e3f3fdd99490addd60014aa7327fe27c6bd5589
b3f882f57f9a213d85eb1c5c6a8a1451bd16dfcd9e4bd00e0a74584422dbd950
GET /img/comments/person-11.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 4175
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-104f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4fftntCsLbK4C6bEpAOAcOeYIaAhRvGk5oaO4aNVIgN0vOTFLfbYJwa6Z28OFspzvas8TVpuuMSXa4whDUZngyep2t8gJJsM6PbQJFl%2BWpVxnfIt%2FJQmhy8nfzlg7omG1QjPRZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199df17b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/icon-survey.svg
104.21.55.218200 OK 4.3 kB URL GET HTTP/3 erailsiwsurvey.top/img/icon-survey.svg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1080)
Hash 9612f51aebfc959fbe20466738ad7a35
40018ba48bd4ed13c219ceb9efdeccac7902ff4f
a35df0cc8723374ad7b9b6a99e7b07b23a32783d0ae1897fbf8dbc6e6ffe11d6
GET /img/icon-survey.svg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: image/svg+xml
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-c19"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nwiO8unYGPLmvAfaxrNB67qNoXH1ANGxTznaxKO71T6zTlrY7rQFTRN3Uhy3%2BjLC8T95gtMQYhPC%2B%2FyrLwlBEjAGAVqMvl0P1OHacTMHwhR4ISZ%2F4LIxT5cEhy%2F9JASqlYC%2FTcM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1959accb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/dict/cookie-consent-1.json?v=10
104.21.55.218200 OK 6.1 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JSON data\012- HTML document, Unicode text, UTF-8 text
Hash 4f1c632e971c4261f927ed0cf67bfdee
18c72b10719ca98b61b1f1f84e4b01f0ed8b3763
2bfa8e9b4326caea44f0d0c0345a31f34f19d47ae2e60fbc7c557df9ceffdca6
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lQQuVpMiq%2Bo%2Fr6SRzp5FMMjHkliRdXBaInN%2F3g4EcSOA0egMYwJhTJymWXQ1GQFm7NNaq9MIeBakffLd90AjZZWIQNOmCI8VMGwec0pddIaf7A0EBvCzTbU8rEkAq%2BtOHKhPI6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1970c48b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/comments/en.json
104.21.55.218200 OK 1.6 kB URL GET HTTP/3 erailsiwsurvey.top/js/config/comments/en.json
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Hash 01c72c627a3038e7869405d68e78ab48
c4542fe77a2753163565ba73f8370585611e4359
3f9a0e2b1e418607c88ef2c2c52f7c8eac9c93d5f10409719b9d8f12b3745c40
GET /js/config/comments/en.json HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-11ad"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mGuSopQnUrIbfsiooamoyj4T57v8xwmrVEMxZN6VW%2FeTfM2ruVKj7B%2B%2BxwFVsa9hcBs3m2tMryEEZNQriE2EAcG9S1iwr7UGZU7rqCMR90L0AHS7FOAbZtjWRQQMfZKFdbyTIEQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae198cdfdb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/icon-survey.svg
104.21.55.218200 OK 8.0 kB URL GET HTTP/3 erailsiwsurvey.top/img/icon-survey.svg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1080)
Hash 9612f51aebfc959fbe20466738ad7a35
40018ba48bd4ed13c219ceb9efdeccac7902ff4f
a35df0cc8723374ad7b9b6a99e7b07b23a32783d0ae1897fbf8dbc6e6ffe11d6
GET /img/icon-survey.svg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: image/svg+xml
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-c19"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F8WRxDg%2BNgKOEOFurpvSl%2BDY%2FI08X6D6dZci6eWS%2F33BJGU1raXD0y65oa7PZ2vC%2FYuLgYNlD3EraSd%2Bb27Ok9uca6LdNPsd7D06v%2FhuMSbXB9ho%2FpwwnfYq7sEh%2Bh%2BzYSkgOmc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1979ce2b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 7e9d63d81a25205bd12ab8b258a264e6
2dfa41d339fd897120f53297f4e0f9fa20c117c1
768ca6e8ca2f678019baeaca289964229311ea185556db48650c297dbe996136
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 22:26:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
erailsiwsurvey.top/css/_core-survey.26c0898c.css
104.21.55.218200 OK 1.4 kB URL GET HTTP/3 erailsiwsurvey.top/css/_core-survey.26c0898c.css
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (3187), with no line terminators
Hash 2e6143d07cb0a0273cd0fded0cd7b430
4853285adf3a468cc8a42b1c6f17d8353cfef896
f2690b871425a66071365ba5be475a5089e8074dbdab7df95a71bbee62e2f5fb
GET /css/_core-survey.26c0898c.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3194
etag: W/"6478a1ef-c7a"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t3nyAHGjX5zurbc7EPrB0Hwwc2uQXJBqk%2BPhmDmXGGxhvGXXaZeK%2F3K7CUusMSTfJ04CCxLTGI7A9kJmwDohrOTsbPHQ9b4DI942kBeynr4dzpcZmRPs%2FQIyBMtcdKvdJRZ6wxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1959ac8b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
laugoust.com/zone?&pub=0&zone_id=4842422&is_mobile=false&domain=erailsiwsurvey.top&var=3956710&ymid=6007685&var_3=688263557240070802&var_4=null&dsig=&action=prerequest
139.45.197.250200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=4842422&is_mobile=false&domain=erailsiwsurvey.top&var=3956710&ymid=6007685&var_3=688263557240070802&var_4=null&dsig=&action=prerequest
IP 139.45.197.250:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint99:7C:6B:09:6A:A1:BC:70:53:D5:2F:97:56:F3:C0:A5:06:9F:80:C9
ValiditySun, 19 Mar 2023 05:11:02 GMT - Sat, 17 Jun 2023 05:11:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4842422&is_mobile=false&domain=erailsiwsurvey.top&var=3956710&ymid=6007685&var_3=688263557240070802&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 22:26:58 GMT
content-length: 0
x-trace-id: ce6b84bae82c441b7568aa538eb2790a
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
erailsiwsurvey.top/pfe/current/micro.tag.min.js?z=4842422&sw=/sw/sw4842422.js&var=3956710&var_3=688263557240070802&var_4=null&ymid=6007685&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
104.21.55.218200 OK 17 kB URL GET HTTP/3 erailsiwsurvey.top/pfe/current/micro.tag.min.js?z=4842422&sw=/sw/sw4842422.js&var=3956710&var_3=688263557240070802&var_4=null&ymid=6007685&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type C source, ASCII text, with very long lines (42367), with no line terminators
Hash e2c1209fa034e82830b27b2c7e00a7dc
0a3057e56de2d45bee9443afba1823ce0629f199
ea6ad99d1789576a76dcb7c3d970a1fb9c81b4b0c493eafc64023b85686a2bcd
GET /pfe/current/micro.tag.min.js?z=4842422&sw=/sw/sw4842422.js&var=3956710&var_3=688263557240070802&var_4=null&ymid=6007685&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 13:49:36 GMT
vary: Accept-Encoding
etag: W/"6478a1f0-a57f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QpKROjaanbPxnPAD3U8ADvWmxb9SF9QyWtUoNqyYcy3HcmBqBTe3ZIq5IfM07ub3RX9JXjbHmPHfHDG3soh6ihrUDoY7hKs1G7FMOKwk44ShkXcfSXYTJPK8TkzDsZsuFJm1ntE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae198bdf6b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
139.45.195.253200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 139.45.195.253:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1532
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 01 Jun 2023 22:26:58 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://erailsiwsurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 22:26:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
142.250.74.35200 OK 166 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6
ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT
File type ASCII text, with very long lines (660)
Size 166 kB (166449 bytes)
Hash 95a32a4d8f8be968bc15d6ab9b9491d1
fbfbcb40c8d8997096cd2ea3d8cfc3dee1981015
a41096fbcf982d79bf075bf2378c9c0c2e8ada5bdc94bd7cc794454135ccf981
GET /recaptcha/releases/CDFvp7CXAHw7k3HxO47Gm1O9/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166449
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 May 2023 23:49:29 GMT
expires: Tue, 28 May 2024 23:49:29 GMT
cache-control: public, max-age=31536000
age: 254249
last-modified: Mon, 22 May 2023 20:58:33 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 472 B IP 142.250.74.131:0
Hash de06f6fcbc144014f20c63dd5fe236b4
7f10e556cc7c7786c031a226d3efc006f8511c28
ae157c3fec7620409ce8cf7d841a47c30b487c02bbc82df9127345b7b1149f3e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 01 Jun 2023 22:26:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
erailsiwsurvey.top/js/_is-browser-supported.c49ec082.js
104.21.55.218200 OK 1.0 kB URL GET HTTP/3 erailsiwsurvey.top/js/_is-browser-supported.c49ec082.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (1102), with no line terminators
Hash 347149a5f2db6ba9662854836bd194ba
dad9564747ff98e7449226386615f6846b11920e
c84c175bb7a22aee56cd585dfeec157387639c062a12b726f8f4dd3f0c36cc7a
GET /js/_is-browser-supported.c49ec082.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-3f7"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KdK63wEnya5J6INeCP5oAr4sC3dQYSFcKQrIZQD1x4DEjf6eWYYdfd6PJoX3gMssRp4YXiZX1ImWXlqpjxMr%2FoUCy5xS4%2B17BR3sQ51fbKtfLpRou3bRkN4qO2jUwjH1sBJFlIg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1977cbbb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-react-dom.production.min.js.708dd72a.js
104.21.55.218200 OK 129 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-react-dom.production.min.js.708dd72a.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129259 bytes)
Hash bf59e2beec56bd492cd1247c25672598
4af373f2ad8d7a2bda18232ab4740abdea6ecb7c
04853b2a6175aa975ebe4d756699da4d7a9a156fef4895cf65b53c8fdf6c1389
GET /js/v-react-dom.production.min.js.708dd72a.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1f8eb"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0B5k8%2BgVP%2FwAvbOfN4%2F0xKJ8vsO9wZYuoYjC%2FMVqaC2qrw0F1dhPqjPwtiwW3mF5Z7Kq9zH8Anh1E6a63euzxRt0h4ESkLFHCcRxBj5VQp27evnKJCkWWI7VG266FKwQ6atqh20%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1978ccab4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
142.250.74.132200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP 142.250.74.132:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint48:E3:15:66:FC:EA:15:BF:D2:34:C1:DD:60:D4:23:A3:63:57:89:8D
ValidityMon, 08 May 2023 08:25:18 GMT - Mon, 31 Jul 2023 08:25:17 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 6eb227f49545693ff09e7e868952f4af
dc2cfcf4a5d33b127c8c5d18dbe577c1e690dfa9
0a22aef6916a4504fc4c1b3f83cf9ad8dec879e875888b7598ee8edde393d86d
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Thu, 01 Jun 2023 22:26:58 GMT
date: Thu, 01 Jun 2023 22:26:58 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/_rtc.692696d0.js
104.21.55.218200 OK 11 kB URL GET HTTP/3 erailsiwsurvey.top/js/_rtc.692696d0.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash 769aca51bf83343eb2ac227aedcd4ff3
2a193572dec77357bdbcc9d02e629afb942fe61b
7110ad0251bd71ba0caa74c691d850c8e3ea55d53d6195408d21d4777e2cf293
GET /js/_rtc.692696d0.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2bb5"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8CWIEDYJlC%2BikRas5s4hcVTPlH0TWBBnYi2ynfdbt1dNgA%2Bfv%2BdVr2l9CLRhZbEPZsRIPSCRcpWsQzsUiuHmOT8Xyp%2F8BPpeuPt32KrpsCGngCm2im8sRlVusJpaMYOwCg6n3yk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1977cbdb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-12.jpeg
104.21.55.218200 OK 3.5 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-12.jpeg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash c937339f4ba54ff7dc150b9865c29084
44206828ca23cbed303193bde1dfe47bdc532972
8e872daac17de58d352c9f4082e6e35af76a8b2138c142a8cf0fbacea195c73e
GET /img/comments/person-12.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 3519
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-dbf"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2sd1d%2BULFUz51FdNsAs4t3kPT%2Ba4to2lPZrt8ctvxItMWyJIde1q5jEX%2BojvOsnJ8DzbSdaAE%2BvIR2sBvoI0O17sVUrNnVEdrn%2Fvnl6SKrIrKQTCZ%2FWZf71asdNjU5Z12PHxFrY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199ff2bb4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/sw/sw4842422.js?var=3956710&var_3=688263557240070802&var_4=null&ymid=6007685&ab2_ttl=5184000000
104.21.55.218200 OK 1.3 kB URL GET HTTP/3 erailsiwsurvey.top/sw/sw4842422.js?var=3956710&var_3=688263557240070802&var_4=null&ymid=6007685&ab2_ttl=5184000000
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash 981c5538a5dd165a47904d851ca24e9d
0858a153ac8444eaf91d933e04cf087135439322
233a2e40f5ab78a653f8e7527d48f226e262bc5b732c02234c1c533afe03cd96
GET /sw/sw4842422.js?var=3956710&var_3=688263557240070802&var_4=null&ymid=6007685&ab2_ttl=5184000000 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; finance_ID=12ace5512e395b8163dc8078922ceb70
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=18Q8lKTBiYBVH%2FDoQa2vlUPAEingk8mvXJpSmIzp7Hw2dgKnsTnPtdt4Lrmz16fLHmb1KqlhVW4IGqtE0RTCngLeA1wwyaI6N7UsI7LY2KMDYRIl7cly3S7CNIJYdNk65pzxhTU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae19e3c9db4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-6.jpg
104.21.55.218200 OK 4.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-6.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash be9ff88491a5bc0745579a3813eb2cbe
870f88a7fae9fdd928af33f47c5ffdddc6a4082b
698d413ddf6b2ec37acf0e982237d239bd912cb097e243cb355855ac2b8548d3
GET /img/comments/person-6.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 4392
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1128"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3SxoojEWPKYMqhdb0rtmar7bMatMXBsSfEu1mS085GiWN7aPbJtFiUpBUPverHPLqFUYm%2BFirZVGnXl8hJF8gSaE3DI32FQtzoUqpT6LpefdKTclCXxsrMWJKZjSyoTEVRgL9gg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199befbb4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-3.png
104.21.55.218200 OK 7.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-3.png
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 2f62e53b6333bc904be22a37a1fd0ace
6e972fefcbe0193d9b28817c47c1ceab2a0235d1
9128194f1b1bf44435a3e80f994157b94a40a3365cd8f0794dcadb41a24c3b41
GET /img/comments/person-3.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/png
content-length: 7368
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1cc8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1LJSQO91hhs80VwtxlL15jYHzfXPoi21Dd427C6SVPRxA%2Fq93kMNGnFQvaT6wpZvlfx6CxTm%2BrV6sHbqzrdJDihVxDUBTH10QODQEqfmycJ3Qh%2BPhZ93LNjGorDzUeXnSjrfVOA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bf00b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-8.jpg
104.21.55.218200 OK 5.7 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-8.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash 6b10e71656e51e27520e854712b44f1c
f78b92dded977e9f275aba726453138155420bcf
64588485da7d470991fdba6c20a6d05c7ad39f92cca72769a95cbe3d873e8edc
GET /img/comments/person-8.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 5748
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1674"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T57%2BaZw4bEsJUK0r3vGpb34gSfWIobYVfrGyfTufO1DuXnsUwYEMfetGnDdBGYRVbuGFVavniQ1XobrMbOLe7%2BDP8Ro%2BpWdBGhAsBRkYcvS%2FmWIdGb0rnKC2jqkQQQrp%2BlaxGks%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199befdb4ee-OSL
alt-svc: h3=":443"; ma=86400
offpichuan.com/rotate?zz=4292518;4326645;5128285;4949467;5381235;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=6007685
139.45.197.237200 OK 4.4 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292518;4326645;5128285;4949467;5381235;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=6007685
IP 139.45.197.237:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
FingerprintDF:FD:C9:DF:54:1F:F8:D0:EB:70:9D:22:14:AB:31:A4:CA:18:1D:AE
ValidityThu, 30 Mar 2023 21:17:15 GMT - Wed, 28 Jun 2023 21:17:14 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4465), with no line terminators
Hash 964ee4d21f747f3d6f6b034483fdc117
daff5bdc2fd49b41167ca32a31ed02df870394b1
61410b8c7a3ccaff610b225e29e392b6085e84ae846937f560d9821057073b7a
GET /rotate?zz=4292518;4326645;5128285;4949467;5381235;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=6007685 HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: application/javascript
x-trace-id: 496a85b1e1b3af3d66ccd742c26779bd
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://erailsiwsurvey.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=48186d937ef74ca28603ef0f11d67924; expires=Fri, 31 May 2024 22:26:58 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
188.114.96.1200 OK 18 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 188.114.96.1:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (17871)
Hash 0fdff67feab23cc69ecfb6800fc54cb7
eb84c650e6d27e290795207b1f37dd7b67f2aa06
456e420aecd5ac679cc2bcb33daf7c063f54894fd076e99e05c06629234d3378
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:53 GMT
etag: W/"646736c9-4859"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1466
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y7BTo8UHlmwjDjq9SWhQK3DK%2FPn9pMXhuGQjsC4LeWReQgVJdOdrNMiqwjhGA1T0f3xZVA9KUKvAv26%2FhPC1ospkFTsTtUIZ%2BvVnkuGwRK46jh3m8YA%2BGsg2SMMtSVPP%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d0ae1991e57b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
erailsiwsurvey.top/img/comments/person-10.jpg
104.21.55.218200 OK 6.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-10.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash 044ab37551bfe632f53b8f15d991f36e
77fdc6210608e5e36e1d36ac7fd867104cb20d9e
36adcb32026c016feaff678063911fcc9e7985e9f0c56bb1daa776f98964ef91
GET /img/comments/person-10.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 6178
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1822"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ehr7CEIre%2F26YEeS2VvF1PHL%2FvqgEcS%2FsJTMWzMbp4vPsl8sFwDF6P55AnOPELJxyJ974dURpQ%2BlJIalKZFvGyOO5qlrMXiAihfoFWJ9QwCKzt1LnQtgpvJ2tTHgEJL3yUj%2BnKE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199cf07b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-index.js.a18034f4.js
104.21.55.218200 OK 40 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-index.js.a18034f4.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (40296), with no line terminators
Hash 3698267f8797b04e520279c94f8e0805
6d3badcf82c2faa17f61efdc44beff2267fa84e4
fe3a9cbf06b7238b24211ed6af8cf947aa8fcfbd0d6a81601993639a48431f20
GET /js/v-index.js.a18034f4.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-9d68"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rBpY6Is3O%2F2kIkgrmCFr%2F%2FnfBnhUGH4WQmK%2FTN9wEI4fXvQtU6%2BmYGHG8qGYJLeqP7UXYvQlkK%2FQmD6QZ71QQIV%2Bn97Q3dRLNkdU%2BGXep4TSqxuC5VY8lngiONAyZPS%2Fpw4R3Wk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1977cbfb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync?userId=12ace5512e395b8163dc8078922ceb70&partition=finance&duration=5184000
139.45.197.248200 OK 45 B URL GET HTTP/2 dortmark.net/sync?userId=12ace5512e395b8163dc8078922ceb70&partition=finance&duration=5184000
IP 139.45.197.248:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectdortmark.net
Fingerprint2D:58:01:B8:69:29:6C:35:45:78:06:E6:15:E1:E3:B9:8B:47:F6:52
ValidityTue, 11 Apr 2023 11:46:30 GMT - Mon, 10 Jul 2023 11:46:29 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash d3ac36a68d6f8a564b2bf27aac359acf
b67f3f298705b7ca37795455fba0600e01dffd4a
6abc000b9c04106b813c02418bdaf9d5d4aa5bb999c6a893ad0cea41a78d9585
GET /sync?userId=12ace5512e395b8163dc8078922ceb70&partition=finance&duration=5184000 HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: application/json; charset=utf-8
content-length: 45
x-trace-id: 61e2916192fb0a69e7eed37dc81ad3b3
access-control-allow-origin: https://erailsiwsurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: finance_ID=12ace5512e395b8163dc8078922ceb70; expires=Thu, 01 Jun 2023 23:26:58 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
104.21.55.218200 OK 4.7 kB URL User Request GET HTTP/3 erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
IP 104.21.55.218:443
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4929), with no line terminators
Hash 26de6480612297db791b37fc60de79ee
782348fe6a88d506c1e6de65a586c0ac6a2ec34d
b9f53a6b7ddb29070ed1bdf87f44f45126cee362599b1049f4aa3edad01194d3
GET /survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: text/html
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JJDsE4h61DFdlbFkQmo7rE9%2BSlLVeKCLyHU70RGhIlavYjQvSgsQGfiQFvQHmeY1Qq5kBmgCRHrTSmQcO1c56PbQlD7xPD63kFTtvNz2q%2FBlpaEH0xG7ATbuwcX8flX%2FB50z0j0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae196abf7b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-immer.esm.mjs.28802142.js
104.21.55.218200 OK 10 kB URL GET HTTP/3 erailsiwsurvey.top/js/v-immer.esm.mjs.28802142.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type ASCII text, with very long lines (10496), with no line terminators
Hash 18f8b1a5408bb552103bab2a9e5cba70
72ba4dd83f4e85a45017492cd8ceedceabcc7587
1fce72cc05122f77f6dfd7ddb9fd43853cc9ee2d3cda9478afafcd48388e122d
GET /js/v-immer.esm.mjs.28802142.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2900"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wVUuseU5w1UXaTR8MpP9zN6gfN3TS4OnoI9KGtOk1kZGuyp2IhvJqemEEqtgHhFS32L0jBwoJR3GXbxhmhJTjQOPbItVQF%2BbZ7Aw05roYhmmkPSkfi%2FE0CAKVvDCWsBuccHa9bw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1977cc6b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_core-survey.2e2c57dd.js
104.21.55.218200 OK 230 kB URL GET HTTP/3 erailsiwsurvey.top/js/_core-survey.2e2c57dd.js
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Size 230 kB (229458 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.2e2c57dd.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:57 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-38052"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xpt9%2FGJ%2B4QD3HBadXnemWeUr2vKj9bI3Tnl6EnUe9Tb67jT1X3mYfMpR6gnTC7GEhDpQhVKa9NR9D9i6PF1e3mJFXM2gv6W5tFenGMNbEX64pyy1EDNtnALY5GKhcc6%2Bazb7BE4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae1978cccb4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-1.png
104.21.55.218200 OK 6.6 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-1.png
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash 8f9a954bf05965bb41cf97a7ddb7a375
de9db936bbea75043e08a55d1f371678fca2270c
a787bd40650924a7bbc61d6ea0bbcaddae4b3129fd8028b68c3629210e41e26d
GET /img/comments/person-1.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/png
content-length: 6577
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-19b1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p5gQtVQ2H6DJLZbt7zyUINcuMH0AAOBPASMxWyIiLRUOtMlh82kox2XB6rkmm6Z3k%2B%2F9wLSGmwHYb%2B2Mqr05sEQbpSGwelkdDfmUiiAKo08OlawmmRIUFHdkq35Sae%2FYBMBjKrw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bef4b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-14.jpg
104.21.55.218200 OK 5.4 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-14.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 6012ff0d59aa6a34aaca1ea8f2fa88fc
ef59662c9b666106486039e9f1deb40fb4a8ff77
2c020310e91430067c7128425f14ac0ff1710aea5e67c144a8fceac46311182d
GET /img/comments/person-14.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 5392
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1510"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P5D%2BXrGAvYkVNUj0lKIYxh82zzDB5PWlzS6EQzTd8S%2B3rU1O3QSzJgzJLm59%2FcAI%2FzUHNWMvdnbAqgJYxFbM0bpdHSwU7cCpJQfJDn%2FkOkwQUxFm9cJxu5yIw5GKTl4wWb5L3IQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bef6b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-5.jpg
104.21.55.218200 OK 4.3 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-5.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 21fd6ef6d69b527c02e92a8c23d28d52
5980b75edc23f7fa2f57fa257cb67c9efb86fa58
f37490dbef620959d7124e3de027c5b5c43a57dc90737163947a6725444051eb
GET /img/comments/person-5.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 4333
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-10ed"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e8HN3l2Awmv0GTb0kzpwheR%2FI3fV6OVtYJviZ8z9MM%2FatW5%2F0k2DiHagNW%2BbQzMYwDpuHuvmji3%2Bs5rbhKICkZRKA8VRN7Z3jCvWqNdorNz5aLPy%2F4msyQIZj4O1%2FlTm9T73LjA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199befab4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-9.jpg
104.21.55.218200 OK 5.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-9.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 529370f9fd3b0f4da6c81ca91a931155
1a4c3e0e7af1ce30dc2ca18d48b5fc3f1b40aad3
cdf1b8dcdce4e9b76157ce90e086ebafb100063eaeb091e97087d97f5d0fb50b
GET /img/comments/person-9.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 5190
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1446"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5B1Zimk%2BsUugBP7f3lNKgJ0zUPq4b%2FdSISW6r1yikKFv7%2Fbfo1LtuUb%2Bq7eGvaUg5rLF0jg%2B4HKbydws8nSVej5wCoNyAmgzcMUJjX6CNCIueVe%2Fy%2Bqd1fhLKWubptIvPJ796Uw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199bf01b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-13.jpg
104.21.55.218200 OK 3.2 kB URL GET HTTP/3 erailsiwsurvey.top/img/comments/person-13.jpg
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash a3364ed9e772ae6f696b814072001bf8
b8f34c657c31bf1e4d42b5d864b2519493d80e92
88f30b8552d0ab928d895390b337a0049405f3b1e8446631e606ba787e1205e1
GET /img/comments/person-13.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/jpeg
content-length: 3172
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-c64"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2BYZ%2BMuLcZEtY%2FtSUZCqmkQjy4mjITJJImcSBa%2FMzqIf86mptat7G%2BKjayqbG5b7t3j2%2FhPdSwkIz29k0AuliSSgA83hh0jTpGxZGPypL2rjWJKcRa9%2FM8syOx4vJrS3Mys5RpY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae199ff26b4ee-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/favicon.ico
104.21.55.218200 OK 1.2 kB URL GET HTTP/3 erailsiwsurvey.top/favicon.ico
IP 104.21.55.218:443
Requested by https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=13ef8ea32bf74149801c53a373020b78&s=688263557240070802&z=3956710&var=6007685&testinapp=&autoexit_86400=3953544&utm_campaign=6007685&utm_medium=3956710&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; finance_ID=12ace5512e395b8163dc8078922ceb70
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 01 Jun 2023 22:26:58 GMT
content-type: image/x-icon
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1631
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=akAB0aIIc2UsWF4ipFjAzBpRSnjSwCNhquQsNXUYp81487HKZXS38UMFzfXixodaNFeWgJHSLYW7BEGwE4ZBG8VxMUnZT32%2FSSXJycqRDEf5ppA2sKxKxTdF5DAgHCJLzdxVse0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d0ae19c7a24b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400