track.camf.quest/go/1ac40d60-edde-401d-8262-18670864da1d/
3.70.16.242 360 B URL track.camf.quest/go/1ac40d60-edde-401d-8262-18670864da1d/
IP 3.70.16.242:0
File type HTML document, ASCII text, with very long lines (360), with no line terminators
Hash 36b2bb3b770f9e801f05a31d592f66e3
52966fac6993dc891d372021259c2e57b315d8cb
c3d17085b78a86e19ffcf0f9986320e52e9c7013e9b7ebd003252f1489970ec8
GET /go/1ac40d60-edde-401d-8262-18670864da1d/ HTTP/1.1
Host: track.camf.quest
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: openresty
date: Wed, 31 May 2023 15:50:07 GMT
content-type: text/html; charset=utf-8
content-length: 360
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Bitness,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Full-Version,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Reduced
access-control-allow-origin: *
location: https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma
set-cookie: bemob-uniq-visit:1ac40d60-edde-401d-8262-18670864da1d=1; Domain=track.camf.quest; Path=/; Expires=Thu, 01 Jun 2023 15:50:07 GMT; HttpOnly; Secure; SameSite=None
bemob-rotation:1ac40d60-edde-401d-8262-18670864da1d:random:ed2bbbef3e315b7be2726b62b708c997=0-0-1; Domain=track.camf.quest; Path=/; Expires=Thu, 01 Jun 2023 15:50:07 GMT; HttpOnly; Secure; SameSite=None
bemob-click-id=SoBG4ikDiix5q7e8VBM7ma; Domain=track.camf.quest; Path=/; Expires=Thu, 01 Jun 2023 15:50:07 GMT; HttpOnly; Secure; SameSite=None
vary: Accept
x-response-time: 22.800ms
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=bad28b8052605ac02b2de0d41235f68d
139.45.195.8 65 B URL my.rtmark.net/gid.js?userId=bad28b8052605ac02b2de0d41235f68d
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash 2203eaae2453a8b1de75f388e7e99961
f1bc59fe3672736ecc2bc7f19d6043be71d0e764
babcf42ed695d2da3c02a43dcd27d843158551787f36b25d3aae36f7ccca9a1f
GET /gid.js?userId=bad28b8052605ac02b2de0d41235f68d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ichauquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://ichauquesurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=bad28b8052605ac02b2de0d41235f68d; expires=Thu, 30 May 2024 15:50:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ichauquesurvey.top/js/config/data/sd-2755601.js?v=10
172.67.178.228200 OK 2.4 kB URL GET HTTP/3 ichauquesurvey.top/js/config/data/sd-2755601.js?v=10
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (5938), with no line terminators
Hash 91f4d77e37e86081e3bd6e40c07dbfa1
cf8f2d3cd898c9544a939713de93950781e2dc13
f06fc8560e496310ae7b347f40e12167618befa3f5e910d284ea5cb20c1513dd
GET /js/config/data/sd-2755601.js?v=10 HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: W/"64774518-1732"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3t5KYAAmjc%2F1avQ8lpiYl6ns%2BqbxoPREpQdFE7kSuODos%2B9NWJBnBE1fzZobP1H2Bp8FQPu3WEM9ms7sy15DN4dPDlSfbA9N8BCtlsZBTLKHS8WLQfHiaa39WC7MK7ocO%2BB6lyM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eec6fadb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/unnamed.jpg
172.67.178.228200 OK 1.4 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/unnamed.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash 449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-562"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZA%2Bz9EEwyp6WECB4BKM9nW%2B6LkyxwK5LI2yjuB8djabUwd5nJiPEPA5RdA2kdRb1Uchndc5I4N%2BWy4IBlLseh15R0Tknfo4Qt2cKI8sqNZq2W6b4THpGMAeeBySByMwdOMv1vGQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed08b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-5.jpg
172.67.178.228200 OK 3.3 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-5.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data
Hash 92c40a962aa579868b64b8b7f1b6575c
f676f1ce463a7b0b7b2c05587a9b52285e55e679
64e47fb0b1dc439d03463c15a7977d88988a4d3f7d563e3d772cc9ca8d41e414
GET /img/comments/person-sweep-5.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 3268
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-cc4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8TcwR2GU5I%2FvvZNeO9XHgW884FV4mcPYLx3gRACvlWz4Al6jwK8iLzk3jaKCQM7Tu6vSUdeYoJKo%2FU2B6UHqtLV0j7WV0AZV0sKG5aT5ZfZjNb6nUSrAi2jfKqDzvXfmNiSCtGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed22b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-2.jpg
172.67.178.228 1.0 kB URL GET ichauquesurvey.top/img/comments/person-sweep-2.jpg
IP 172.67.178.228:0
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash e489d022a40ba80f51fb5acc1addea46
41c334f49c248783037ceaf6fc335acff62f760c
c39b4bfbcc6aa147547ca922c4f80350b48dbfa59cbd5176f44373e3b20f3567
GET /img/comments/person-sweep-2.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1042
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-412"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6iOodSRgtcB7G8GJ5CJNG1kXe3w7y%2FH4y6B8FBws0M6P0cAtdwpwaliMqbdC81ZlnHH5wFUs7Tip35MuiBehadSDGxJaGlBzuQZSOIBi0W%2FCbK0pXnMTSwSkfuCIiTK0BJYQqNA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed2ab4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-3.jpg
172.67.178.228200 OK 1.1 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-3.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 72ab252d8ff828965ad984b8ab16991f
e45ea3665e80feb2e6309b04e1ec2e8d41bb279b
c5d70c3abf95aecc84bcc1b1f9fc25848e690852071169bf57522fd671550291
GET /img/comments/person-sweep-3.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1063
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-427"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8uQjTx3eJkekmnI6PSTDxVxkxt2dqcqPSmbO6vqlOuRxmo9%2B1LxdMj%2FPZ6OPy1BnRMD4bgbJPEzXIwpsuhIYM6iJV69fguA0bRb9qvdFLLsvD%2BE7voSIH6Ov0sT9e3pYyfOJSkA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed25b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-4.jpg
172.67.178.228200 OK 3.7 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-4.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x50, components 3\012- data
Hash 02eebe83bc6786ef27b852477d4c4998
205314ba911137b6f6be4eefd946a2c62229e591
a0038f9d5f6fe1ce8fe1bf1cc7256f05e16c11d27041739c55918b823744753c
GET /img/comments/person-sweep-4.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 3694
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-e6e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FoG0QEHJgCSWjJlHTdHp2Jvn%2BHSr9MSQp%2FOZ5ejKq7uGOXKzgGTUqICmDmtSV%2BikeRve0yqpkKYPrJyqmksMZSHd5V0c6gNFk%2BGx2UBsj5U1Xiw1oyZLddxtBCRgn%2FbfEboWaRg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed27b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-7.jpg
172.67.178.228200 OK 11 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-7.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:30:25], baseline, precision 8, 50x50, components 3\012- data
Hash 583a669aef17441f222db5be083f3750
f869d6bf98c43f0a0a935305096fe637df202687
5afe11e79d5ce7715f2dd2a291c3841d7abc1a62ac89002214f9562f6f58865b
GET /img/comments/person-sweep-7.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 10884
last-modified: Wed, 31 May 2023 13:01:11 GMT
vary: Accept-Encoding
etag: "64774517-2a84"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mXLs4IRS0VSkCrEiVRhoaMkWIkFxfQT9l3o5r1Zmnxga15r%2Fyv8lO7Xnn4p47txgzK2TLKLH0W1RIOaQ7NVH4zWAwWc7TpoFqvnheX0xo%2BGuBfQ0GjHK%2Fi14FiUK8s5dqVJOeKg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeffd32b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-8.jpg
172.67.178.228200 OK 1.2 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-8.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash f60b9c2d018d7a29d014742ae8e36839
1b59e7eec38eb9f620256742f83ae7938ac0bb07
ed7ea3a5c85d0ba010c783b9599441ba28fb4333cf1ef534f6ec07b5d81e7fd8
GET /img/comments/person-sweep-8.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1182
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-49e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MjtSLChbFcHP6xoshyrLXT%2BwJEyW13XAEknW6vWJa1c7mrHTbpmEfNSyoFWgM668FPTipZGy14pDEYAljvPwL94GptvFdCXN%2BhL6slxrH6AiIYdJxcq3qaes6QAMKfgyGE9syQM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeffd35b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-9.jpg
172.67.178.228200 OK 12 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-9.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:32:23], baseline, precision 8, 50x50, components 3\012- data
Hash f950070b2582c8f9202b5d084e91905f
7154a29bb2ecd778435943cf02c88fb9b0a86183
ccfcb58ee86d9df13807286e232dd153f04c84527fd80d5efc2212157cb6386e
GET /img/comments/person-sweep-9.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 11871
last-modified: Wed, 31 May 2023 13:01:11 GMT
vary: Accept-Encoding
etag: "64774517-2e5f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GsLeQA52cOQDwhAhwGMwfoPgQiHWI2So9NvmHljp7qFvpR3SnBSty1%2BiRMCQDKX%2FDxCGwswDUK%2B0lVCEJc8uLJw%2F%2B8ikBVcBku6BvnDB1IISh8CJ7kR4M9%2BEZK3f87HtK2m4R6E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeffd39b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/config/dict/cookie-consent-1.json?v=10
172.67.178.228200 OK 19 kB URL GET HTTP/3 ichauquesurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JSON data\012- HTML document, Unicode text, UTF-8 text
Hash 4f1c632e971c4261f927ed0cf67bfdee
18c72b10719ca98b61b1f1f84e4b01f0ed8b3763
2bfa8e9b4326caea44f0d0c0345a31f34f19d47ae2e60fbc7c557df9ceffdca6
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/json
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: W/"64774518-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RGvimu4Ux9U65AorYkMx1qoNoFWe84UvYbUJYDM%2FOkiRG6Kj9yxwdfoRX1JCGOS6nlKff%2Fhnkzc6bdxGZEIfAd0%2FEwPm24hdJyG0qT%2BObQnE4jp1m3uhPp06ezKiOBWHMiqURCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eec6fabb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
offpichuan.com/track?offer_id=2755&z=4817929&request_var=PropellerAds&variable2=SoBG4ikDiix5q7e8VBM7ma
139.45.197.237200 OK 144 B URL GET HTTP/2 offpichuan.com/track?offer_id=2755&z=4817929&request_var=PropellerAds&variable2=SoBG4ikDiix5q7e8VBM7ma
IP 139.45.197.237:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
FingerprintDF:FD:C9:DF:54:1F:F8:D0:EB:70:9D:22:14:AB:31:A4:CA:18:1D:AE
ValidityThu, 30 Mar 2023 21:17:15 GMT - Wed, 28 Jun 2023 21:17:14 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 9cab0d1d53cbb27f959b0e054b944c5f
866dcec2220e7db67ea46cda5f6accf12258fd8f
602952a089e4297e18d007d755a16e482e58c4551654f8b7035d2a2c71a2a3de
GET /track?offer_id=2755&z=4817929&request_var=PropellerAds&variable2=SoBG4ikDiix5q7e8VBM7ma HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ichauquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/json
content-length: 144
x-trace-id: c64419aab8c08d0ef85b156ec775f370
access-control-allow-origin: https://ichauquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ichauquesurvey.top/img/comments/person-sweep-6.jpg
172.67.178.228200 OK 10 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-6.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:31:13], baseline, precision 8, 50x50, components 3\012- data
Hash eecc2c7e1efc1d69f01f47b677666cf2
c4e909b86e22612ca4c5e599c7fc7204573b1baa
92aaaee44b9c6f7f69cd778106927274a9c6f0fec665555be6b020d220207fb6
GET /img/comments/person-sweep-6.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 10400
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-28a0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uivtkgw2tK30YiCmagKFRuwYJv%2BsX9aoXz7bXrdBIyt6fehkuAuasbFbgzT3c4ebOXcMlJsXKWa%2BediaV%2FyfX%2B8nogWjrgbKtyhbkmWAJSNaqzMd7T5FZpUoMIk1inOm%2Fmxy9Wg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed2db4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-11.jpg
172.67.178.228200 OK 11 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-11.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:32:58], baseline, precision 8, 50x50, components 3\012- data
Hash e33f2bea60761c8f1c4cf8648839692a
14a8b54006c419c85842d96a8a4aeb837f5a0a5e
9d020381e094ab0ae1556c751f9c4af6498cf12989cd9c3605ca91b856cb5951
GET /img/comments/person-sweep-11.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 10636
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-298c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pch0X24dQ9XHFGe2Vx7ciEATnhUKk5yU1KUJtQIe0Xg42VXMeNmZNVFRL%2FJrH5oGBMIFREZSdRvalCxTrz4qqYTNNqbQCipmeP3tKKNzwt%2BjVEPKeOWPucFBCMEZY7qbt7VoKgE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef00d47b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-12.jpg
172.67.178.228200 OK 11 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-12.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:34:12], baseline, precision 8, 50x50, components 3\012- data
Hash 85b4e587433a60e7d3e98b1ef93a71f8
c4c8600ce8a5be2640aacbac866bf8b1f8192f26
65e9048c6b09381baa8056de19ad758b2a302dbbc3fb1cdb509e414ed73c69b8
GET /img/comments/person-sweep-12.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 11188
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-2bb4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F4INobDPV3uqvZW%2Bsj0%2BhS%2FaJPQywjM%2Fe0P8nTG4ObKrI953E1i7W09TBnbfqJDidDQuy7j%2B9q8yU9zpduM7bSL53sbq5G0yRefx7mcRuxFEhbVssHDZLAd8ydnF%2FOjYrWdmVvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef00d49b4f7-OSL
alt-svc: h3=":443"; ma=86400
dortmark.net/sync?userId=2119a4c9064e7822fa20e1e2a4b1cda1&partition=sweep&duration=5184000
139.45.197.248200 OK 45 B URL GET HTTP/2 dortmark.net/sync?userId=2119a4c9064e7822fa20e1e2a4b1cda1&partition=sweep&duration=5184000
IP 139.45.197.248:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectdortmark.net
Fingerprint2D:58:01:B8:69:29:6C:35:45:78:06:E6:15:E1:E3:B9:8B:47:F6:52
ValidityTue, 11 Apr 2023 11:46:30 GMT - Mon, 10 Jul 2023 11:46:29 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 78a9bc6d89837a3a1b8bacf17f9e1ee4
5a9b1da78cc53dd50124a8a5ef666b98d003e3a5
c7a69c96553bb637c89e6499eb4d5731bbe98c99b0bbc8141348872e95edc511
GET /sync?userId=2119a4c9064e7822fa20e1e2a4b1cda1&partition=sweep&duration=5184000 HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ichauquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/json; charset=utf-8
content-length: 45
x-trace-id: 0074c0a6e45a2481cd2ec90147913f15
access-control-allow-origin: https://ichauquesurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
set-cookie: sweep_ID=2119a4c9064e7822fa20e1e2a4b1cda1; expires=Wed, 31 May 2023 16:50:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ichauquesurvey.top/js/_global-config-sd.c5676aa0.js
172.67.178.228200 OK 15 kB URL GET HTTP/3 ichauquesurvey.top/js/_global-config-sd.c5676aa0.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (1169), with no line terminators
Hash e3295213d3f10689cd90f4dc2740c6a3
5430bc12b341b42bd3646e3037aadfdaba310d4f
c43e834f5b6fb54b68338f0bd49c3067232c57b42269305679d986756d999431
GET /js/_global-config-sd.c5676aa0.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:07 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-491"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S2Hl%2BsGwqLYSNhPxDoXERGmhLm5KKHyVFlWUJVc4PE3Dp7iCEx7or3gP25q%2FnzVdaTtjZE8w3GUld%2F%2BYEEo%2FrOER4rFBshOSfLWAp540C%2BOPV64oHcpz%2FAnaZiKuZrWe0CqvFt4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeadd26b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/_is-browser-supported.c49ec082.js
172.67.178.228200 OK 6.4 kB URL GET HTTP/3 ichauquesurvey.top/js/_is-browser-supported.c49ec082.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (1015), with no line terminators
Hash 68e1a61f2550d6589e5ae1830fd2d3db
aeefce07be8a0ea5485c7463a8a368806c55e059
a0b2b72ecb2738d1f49c83d11a844bc96965537fb634ed8d1c8c3dd95f4ef0b1
GET /js/_is-browser-supported.c49ec082.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:07 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-3f7"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Pzt2duO8DK6M%2B8beKx5lWPuEJ7676d%2BulNez4EhLlkrp8XPtkPL39rlD75NWYJutNZrr5EgzTlvzOqWzfUWlTwnEFL0Ax4SF9a9BrVaPwqPEZgB9kCT721gJCli%2B3c%2FUHRG9dTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeadd25b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/s-storageService.js.24e15119.js
172.67.178.228200 OK 2.0 kB URL GET HTTP/3 ichauquesurvey.top/js/s-storageService.js.24e15119.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (2572), with no line terminators
Hash 4816f938e9d10c0caa7cd06c6a9b4795
ad3bd074f4b8b7550d6f9563e5097683a2dc76c2
36c9a2201b667c84dbecb7415e6fc6b9697ce920edaf258db96831ff284177b0
GET /js/s-storageService.js.24e15119.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-a0c"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f7bx8idk8JLfUO2JxbXn9L7BKNeeqkpStyEkdAczVG9fc3pfIOV5zXw6Ii6KKnbQe3GUwF3viVAhnJiM8QuiUh2rNmVXinoif%2F24zGJJjAt24KLXvBNW0TJ2GMYycN8DAsQKmI8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48d4b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-1.jpg
172.67.178.228 3.9 kB URL GET ichauquesurvey.top/img/comments/person-sweep-1.jpg
IP 172.67.178.228:0
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, datetime=2017:06:15 10:57:43], baseline, precision 8, 50x52, components 3\012- data
Hash 72c067fe856886245e7c47c7ff84e041
5210cb05f897db334c61f8971ccec9a7396ea8a7
9a106ad9f340c7bafdd365ea1ad24b9336c304b1e72653eb58e84b5604471030
GET /img/comments/person-sweep-1.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 3900
last-modified: Wed, 31 May 2023 13:01:11 GMT
vary: Accept-Encoding
etag: "64774517-f3c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ii8NoNtPUnCRsPsINCt0uRD%2FszvYb3lZuhrgi2tpJYXhDWB6BLSfU1wsVDnrBe56D7W6eONavUQ1uGH2q37goaJIszQx16h44pWqgZUA4%2BoNLajkIpv0vKG8NqHkDOqcFL2OOuM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eefed09b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-15.jpg
172.67.178.228200 OK 1.1 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-15.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash ca57a3f68e171ebeb7798679d5fb79ca
688e6a4ffeeae81c9e970e03081de1fe26afac9a
f739552ded4074fa25475c5a5ed9c49dc0a769e791e9916b5d8bcbc044f8818a
GET /img/comments/person-sweep-15.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1067
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-42b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7WshBFsQqKCwdoHSVcCmF2RaMj8u%2FwLXzh1QJjE4wzUb%2BDXBv5tRANpLeLZ%2BPjONOIL8bHZUxuoAMd2T2hh9dsyJYW43g3vxTdVeshK%2BRALaf7AsuYCNULOY3JYe%2Fw%2Fd0k%2BvdQU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef00d55b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
172.67.178.228200 OK 68 kB URL GET HTTP/3 ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4653), with no line terminators
Hash 01832f925f61da36d28b792d94af9a6c
46b12b60b825548751ab302d592c42c482dec753
5fd60702b964113fcc5485441fa975d69877256480696dff34638ef15fc7af41
GET /sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2 HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: text/html
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YCOH%2B0%2BtO%2B8N1i96UdeqwOOTZ4mgBQB1T7CMQltnhY50I8hNN7l1xe%2FDkStsbjy70ZiswgrWo8lQilt9OY%2FnU70BbgOAAvdEeXd7aRQshsE3Gs%2B8Pzc9c3WLAebVhwib3oTRwZw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eef0bccb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
laugoust.com/zone?&pub=0&zone_id=4843177&is_mobile=false&domain=ichauquesurvey.top&var=4817929&ymid=PropellerAds&var_3=null&var_4=null&dsig=&action=prerequest
139.45.197.250200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=4843177&is_mobile=false&domain=ichauquesurvey.top&var=4817929&ymid=PropellerAds&var_3=null&var_4=null&dsig=&action=prerequest
IP 139.45.197.250:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint99:7C:6B:09:6A:A1:BC:70:53:D5:2F:97:56:F3:C0:A5:06:9F:80:C9
ValiditySun, 19 Mar 2023 05:11:02 GMT - Sat, 17 Jun 2023 05:11:01 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /zone?&pub=0&zone_id=4843177&is_mobile=false&domain=ichauquesurvey.top&var=4817929&ymid=PropellerAds&var_3=null&var_4=null&dsig=&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 15:50:08 GMT
content-length: 0
x-trace-id: 286e17cc15f026889b157d6b73548cd5
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
offpichuan.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=4817929&ymid=PropellerAds
139.45.197.237200 OK 9.9 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=4817929&ymid=PropellerAds
IP 139.45.197.237:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
FingerprintDF:FD:C9:DF:54:1F:F8:D0:EB:70:9D:22:14:AB:31:A4:CA:18:1D:AE
ValidityThu, 30 Mar 2023 21:17:15 GMT - Wed, 28 Jun 2023 21:17:14 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 5de1f742be6ba2d8fb38086f2dbdb58d
f6b434c5acf8a51b63a8608cdce775a99bcf463f
7db1ef0de88c9beb483289564fc2e5398d52f08b15915e04f82f77d9a83b8951
GET /rotate?zz=4599387;4599749;4702124;5426181;5426173;5428099;5428259;5426182&var=4817929&ymid=PropellerAds HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ichauquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
x-trace-id: f9deb7a4587d5dac961393b402e25b7b
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://ichauquesurvey.top
access-control-expose-headers: Link
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
set-cookie: OAID=d94ae7a6a7f143b0a93355915056f3cc; expires=Thu, 30 May 2024 15:50:08 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ichauquesurvey.top/js/sweeps-survey.4e39a450.js
172.67.178.228200 OK 2.3 kB URL GET HTTP/3 ichauquesurvey.top/js/sweeps-survey.4e39a450.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (2440), with no line terminators
Hash 0284ac0f8a9fa689202442cfdb7b1216
25c9d75ba4889328ba6944dbb0be104c76dce17c
34042b40e02eef463f6ddc0b8a803b954f91b2e2505f5310512a38ebbb859809
GET /js/sweeps-survey.4e39a450.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-916"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z6RPZxpnTVFgYuOmFQiWHwu8VQI44AhKaAeLsAhCV4fh7yBTYz1LTFXddJxsqs6102R8ZxmtohiBz29UmjI9yTN0mC6FhgSBOW%2BTXuEMd3KAEoYyK%2BDBE2mqHmxTNxivj3YtKW4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed58eab4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-16.jpg
172.67.178.228200 OK 1.2 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-16.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 9574e9e3f629fc4cc0f470f678a232ca
89412a05077b4eaa423f7790bd5fb4ee3efc84eb
15f660e8aec56d65e9da4efcd552984e5a623c25b8484c3efbdfa7567bdab17d
GET /img/comments/person-sweep-16.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1208
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-4b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6yK6gAbolpwVEdWx6iHNm4aXxhZ6lGnspW4RkxowBG9QxfwHZjtoenGEiWDdDqpjzjTLidve8EC2zLtFkZrKPpMMRrGLqpoOLZDabdA4jUYkvKoOD%2FElIPJkQHGPj6MrUwKDQpE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef00d5ab4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-14.jpg
172.67.178.228200 OK 1.1 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-14.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 4248fa5ac54e7b0dfa5a791bd1dbd161
aa880bfbdca2ec69d93fd29606a64bdce6ee830c
174659ceb240363f2d31a6fd392f108ad714a592b0dc3192d1051c42237bf8b8
GET /img/comments/person-sweep-14.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1146
last-modified: Wed, 31 May 2023 13:01:11 GMT
vary: Accept-Encoding
etag: "64774517-47a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kLNI82Bi4SPsxxhinB8oQV%2FhPBK1Nnlb3%2FwZXqnRKi0NcYi1Z%2Bl%2BbpgjlRcDgs6dGE%2FFkabjaNsrXz3QzaVMb%2BMPHiPfIxtCNig2jOSPsjcgJ6zfM4w%2BG2BMkIHmzUouEj1eeck%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef00d5db4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/v-immer.esm.mjs.d9bdbc14.js
172.67.178.228200 OK 10 kB URL GET HTTP/3 ichauquesurvey.top/js/v-immer.esm.mjs.d9bdbc14.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (10496), with no line terminators
Hash fb46146a17eb0c4a887b7df1f66f7fa7
4be05a7ad649b3b907cecb1e92262ef8eb849946
d326fd3d05fc533b5f383d2695e3c013e267d1de919a64c798b49c7f8f36b55c
GET /js/v-immer.esm.mjs.d9bdbc14.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-2900"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9e5%2FJy0JzPd2U2tOce0dmM9KjcFbxKJSfZFjBSzZTMj0VSDKxs8gUqDIgITh94Q5ObwHzU4pnfXXElDPTZrjWkkBCYLb11jyqFfqE1ftFOFgXPE0M2sXI2teadxYgtL8Kmgmp7g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48d9b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/sweep/tokens10k.png
172.67.178.228200 OK 67 kB URL GET HTTP/3 ichauquesurvey.top/img/sweep/tokens10k.png
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type PNG image data, 480 x 500, 8-bit colormap, non-interlaced\012- data
Hash 7226e7c7102de83aea128e7417e87779
1777a0c66bd17c26c4da8462efa8975342581a4d
2cb3f101f3327f07baf3bcd509372a6058d871da12ae0661771a5c7c339fff36
GET /img/sweep/tokens10k.png HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d; sweep_ID=2119a4c9064e7822fa20e1e2a4b1cda1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/png
content-length: 66622
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-1043e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jq6%2FB46X9tLmhyk%2FSj1KbZzYCGdhWRB4dLogSujg43j7441N98ooCX4mjwX6oCvVZIYrFy%2FTCM1M0Ur0CJXo3XoTWfZIeZTieN%2BaL983HgZ2CosOUYM28abK7NHGEX6s2MkAnEI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef1bff6b4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/sw/sw4843177.js?var=4817929&var_3=null&var_4=null&ymid=PropellerAds&ab2_ttl=5184000000
172.67.178.228200 OK 1.3 kB URL GET HTTP/3 ichauquesurvey.top/sw/sw4843177.js?var=4817929&var_3=null&var_4=null&ymid=PropellerAds&ab2_ttl=5184000000
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash d5db67d3390c9b865ffe685fc23eae21
c53c7e0446af5801f7ca4095cff88abb6d6c29ae
7a1b622b85fe540c0d442cd9ff3580d6444a0583ed6a977bb5045d072a232dbd
GET /sw/sw4843177.js?var=4817929&var_3=null&var_4=null&ymid=PropellerAds&ab2_ttl=5184000000 HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d; sweep_ID=2119a4c9064e7822fa20e1e2a4b1cda1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:09 GMT
content-type: application/javascript
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: W/"64774518-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dz0apDrtBcuzcXgEKeTpr81HiD8fZs%2FNuSv3P7ahr98K%2F6NLC4MaOmQOhYEo3%2FqisH4PuGM5Uehr0eVS2Tytr7wRmZL1ytWtdLpKVcumK5RRX%2BOZny72QQmIaF0dmQ4vhh8CMMU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef2a963b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/_each-land-config.69212705.js
172.67.178.228200 OK 72 kB URL GET HTTP/3 ichauquesurvey.top/js/_each-land-config.69212705.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash c657d92f38300deb621a9e68a318f735
3e4db2aedafa82522ebb876c7333ca0228730893
946adee21bc6d84c763d1d677d4d71d65ad042f2f4fa0e69d0117c9b6cddaef7
GET /js/_each-land-config.69212705.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-117ec"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sYOPKmx7koj9VYSO0lAZv3MaAubkKaRp3M6Slm7pRUnUQdhmxkWhOn4dyorqaPbMyA6KiparyKS%2BuEVDFImN79K50Ck%2B4LXPhgxJwXb1OsaW%2Br6CcPPraY1QaN7e6Jr5oQlIqew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48dcb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/css/_core-survey.26c0898c.css
172.67.178.228200 OK 3.2 kB URL GET HTTP/3 ichauquesurvey.top/css/_core-survey.26c0898c.css
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (3187), with no line terminators
Hash 2e6143d07cb0a0273cd0fded0cd7b430
4853285adf3a468cc8a42b1c6f17d8353cfef896
f2690b871425a66071365ba5be475a5089e8074dbdab7df95a71bbee62e2f5fb
GET /css/_core-survey.26c0898c.css HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3194
etag: W/"64774518-c7a"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2427
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2LOR0%2FDrIrAaqPO6a%2FMp6EIrHItECNwHI7eLP5qmPpGM8dvLZz29fK7oqFCVsp%2F3BOM9RyzPTgOIngTQWE3y6mZZ8tbv9JOZ2VrMonL4ifzUWeToGxiuF%2B7hC1Uszxc1FRfPvZo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed58e8b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/favicon.ico
172.67.178.228200 OK 1.2 kB URL GET HTTP/3 ichauquesurvey.top/favicon.ico
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:09 GMT
content-type: image/x-icon
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: W/"64774518-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 925
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ng32c8AawxEhMOTltWeshKamiXvxAaXNDmoe5YPFfLrL%2Fhcq1zEegz%2FjAf0Gd2%2Fl3wr2rFepeDcCS%2B0x5peQ4gEifvabYyf3y5Irw4cVWQTRpzCa4LMsy17RfxBdSHo495%2Fz2TQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef28930b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/v-index.mjs.e00127ab.js
172.67.178.228200 OK 35 kB URL GET HTTP/3 ichauquesurvey.top/js/v-index.mjs.e00127ab.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (35051), with no line terminators
Hash 2c45ccd54020d66dc97cbf0bd80895ce
176de1d192223853374e046e9a52b0bd4772c424
b61a21961e3b604fb9cfd5ce1fe7ceb9d3aa8904c8d758a6855611d18d486cd0
GET /js/v-index.mjs.e00127ab.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-88eb"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AqVgGxAyfQoG2Dcui3xNQyPb3sfSBmwDeF8%2FKb6yfbaj4RYyM8UXp24hvHAqcqTHUz1bIAPFgyVzNXmXtlTOE8XH7Lcvji5f5X07bHv2gGlf%2BOygu7j6jIWM2LI%2FqObkVkI%2BcY0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48deb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=dc8570b17e6d2c4495e7e7de7cb19a01
139.45.195.8200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=dc8570b17e6d2c4495e7e7de7cb19a01
IP 139.45.195.8:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 4597655fd3eacdca972823eaf5c650f2
a742ad77a9ceb47b86822242bafa524ef9ba0284
337c4e6af9a3c790ef48bb9301e4e57c3368865c5b341fed143be093914da381
GET /gid.js?userId=dc8570b17e6d2c4495e7e7de7cb19a01 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ichauquesurvey.top
DNT: 1
Connection: keep-alive
Cookie: ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://ichauquesurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=bad28b8052605ac02b2de0d41235f68d; expires=Thu, 30 May 2024 15:50:08 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ichauquesurvey.top/pfe/current/micro.tag.min.js?z=4843177&sw=/sw/sw4843177.js&var=4817929&var_3=null&var_4=null&ymid=PropellerAds&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
172.67.178.228200 OK 42 kB URL GET HTTP/3 ichauquesurvey.top/pfe/current/micro.tag.min.js?z=4843177&sw=/sw/sw4843177.js&var=4817929&var_3=null&var_4=null&ymid=PropellerAds&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type C source, ASCII text, with very long lines (42367), with no line terminators
Hash e2c1209fa034e82830b27b2c7e00a7dc
0a3057e56de2d45bee9443afba1823ce0629f199
ea6ad99d1789576a76dcb7c3d970a1fb9c81b4b0c493eafc64023b85686a2bcd
GET /pfe/current/micro.tag.min.js?z=4843177&sw=/sw/sw4843177.js&var=4817929&var_3=null&var_4=null&ymid=PropellerAds&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: W/"64774518-a57f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1hq%2BvbNvM0k9ch6yz%2B8xxz38fTeYjui5fxn7x%2Bm2TCgztgyFEwOUj0eoJCPc%2Fu8kjyQy408PiwWdW3dg5eiau0zFK%2B6%2BfqpWVvMFJwYklV6W4MfOHyUC9Reu%2FCpnUzHWfPltzi0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeefba0b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/v-redux-toolkit.esm.js.e88f795d.js
172.67.178.228200 OK 11 kB URL GET HTTP/3 ichauquesurvey.top/js/v-redux-toolkit.esm.js.e88f795d.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (11317), with no line terminators
Hash df1b7b57b2e4f95c2ddc857a38274eff
0db105076f74e15ca30dd296b64c5a59d104ad1c
e63ecbc4a88d54460c299b83e4756276ea85fc804da2a75e0e6b4d9a0cca8efe
GET /js/v-redux-toolkit.esm.js.e88f795d.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-2c35"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a31lTPK4c10sP%2FrbF8I%2Ffn3%2BqRdhjwYKkWN1C5ohtNiDzJeD5n6g107EFINIMoaEu47Q%2FvmlbaPwGFXjwloX192mJW%2BQtr5TGNQOKdeyECVghUicH%2BCtdHgbpfXueQ9DCWecwWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48d7b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/v-react-dom.production.min.js.aa9bb1d1.js
172.67.178.228200 OK 129 kB URL GET HTTP/3 ichauquesurvey.top/js/v-react-dom.production.min.js.aa9bb1d1.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 129 kB (129259 bytes)
Hash a2c65dabc14862085e4b7a006a961d32
ace8625459aad4a88839efb991d7d858cc7b9559
f781c8f2b61efb3cb4b5b596c1882dfd738c4d2b19d85a9f6ffb3905bba4f252
GET /js/v-react-dom.production.min.js.aa9bb1d1.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-1f8eb"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0Kv%2Bi5aPaaA53nqp27CLaPYIUn3Y7M0VGE7JVpW9iaHwMDsXNIziIBtN07YSg9jn6yAufxAJjwCemZch8izft0sqlLaIr6VmUWfMkkxGyoGP6NyAgfS5UATWMKXySAt6j0YmO9U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48e4b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/_core-survey.2c96763c.js
172.67.178.228200 OK 229 kB URL GET HTTP/3 ichauquesurvey.top/js/_core-survey.2c96763c.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
Size 229 kB (229073 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.2c96763c.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-37ed1"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yR36C9hCsKAUQD8QbKzQS%2FCeBzBmrFSQQVBk%2FusNUYxk%2FaL4rOwez2iw%2FtOrvW81PQwc4E0E5zOLoinMfRC%2BQXNWOZ50GFOG%2F%2FyTmMNZL9oIb5qycD6BQxQsdz7Mwcgcn21WtCk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48e2b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-10.jpg
172.67.178.228200 OK 11 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-10.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:07:21 09:33:44], baseline, precision 8, 50x50, components 3\012- data
Hash 2f7d5d907d9e6d0250afbdbeb7f3cb0c
136703751a36b76b1fe599930ec855f90fde9f23
271e2dabe37ae76b27d28edfeaf49c9a4135f62dd24a3c0ff3387ea9354841f1
GET /img/comments/person-sweep-10.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 10828
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-2a4c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1vSm3Yc6qo7BZhUbeF1nvigDMfz0GMavA05s0qKhfzfcBqN9rKTjeMIj0DnjYgsOeF8IabMwfuOEPcS8AwdBF7%2BPZtBE94Y9zdP3tkHOTBRyppk9K1iGbdrc6nePpzsnNXiwuIE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eeffd3db4f7-OSL
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/img/comments/person-sweep-13.jpg
172.67.178.228200 OK 1.1 kB URL GET HTTP/3 ichauquesurvey.top/img/comments/person-sweep-13.jpg
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 50x50, components 3\012- data
Hash 85059de53011f0ef712a5f4b5dd13219
481385e3fe4b3ec1fd703de246796396a33777b1
7f442be1fc6ab7aa64035207cedeff057625371b7a58d551fda451acee6b4f58
GET /img/comments/person-sweep-13.jpg HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1; ID=bad28b8052605ac02b2de0d41235f68d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: image/jpeg
content-length: 1110
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: "64774518-456"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 924
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ye6BL8z65oInvhIo9wjAwNmJ11hwn1LsrR%2FiqBPZfreWMTmOovquOiDgVWqiRNbEjvvCkuoDqHdHx8YtUl%2B%2BS%2BrczOnkkBNGrHaJI%2Bp5ve5bxtBa3tVf1iePRNBextxeB3SirXY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005ef00d58b4f7-OSL
alt-svc: h3=":443"; ma=86400
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
139.45.195.253200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 139.45.195.253:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6949f52318584a4b51c719a9b84a7287
9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905
72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1520
Origin: https://ichauquesurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 31 May 2023 15:50:09 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://ichauquesurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
cdntechone.com/stattag.js
188.114.97.1200 OK 18 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 188.114.97.1:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (17871)
Hash 0fdff67feab23cc69ecfb6800fc54cb7
eb84c650e6d27e290795207b1f37dd7b67f2aa06
456e420aecd5ac679cc2bcb33daf7c063f54894fd076e99e05c06629234d3378
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:53 GMT
etag: W/"646736c9-4859"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6487
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Xc6ytD3dCgmdX1xcGeZAvq%2BV1v%2Bml%2F3DwILKu60AMEcQzg7EEkW3IEVCq4rWihd45q5SMQ8A5fv6f4uQfn7T9aZdU6GS%2Fha4NQAl4q1xM8gUC5Zc6xFuBQ130K1ko9zqmg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d005ef219a0b521-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ichauquesurvey.top/js/v-index.js.1bd59bc3.js
172.67.178.228200 OK 40 kB URL GET HTTP/3 ichauquesurvey.top/js/v-index.js.1bd59bc3.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (40296), with no line terminators
Hash a1eebf7f284d06e15ce2bb56c67c6af6
0fddedec37b7adc94721964fd98db952c51855f7
11def302cc72a9de4bfeae98921d5e014ebeb7bd27063bb76908e360b22a6c9b
GET /js/v-index.js.1bd59bc3.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-9d68"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2426
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FFzq05o0XUfvhiMUIFKvaugS2SW6%2Bv8Lh7JFSVsecovgcBWcldIeEKXPpGsngxwhJGUf1DByKGaiGRpikLGLKOF217UUyNrRst%2Fz5r%2Fa6zczYlHMkNtvoDGtShbyJej2bWS76Vs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48d6b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/config/comments/en-sweep.json
172.67.178.228200 OK 4.9 kB URL GET HTTP/3 ichauquesurvey.top/js/config/comments/en-sweep.json
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (5602), with no line terminators
Hash e365b2a50ff785aa57118984ebc86b5d
0cf187164eaa42ff7e244ba653bbde659feaa5bc
3094a84e8e909474fae4e0db6685d9b407d4493efd9389efe35caf326c95a6f0
GET /js/config/comments/en-sweep.json HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1; loaded-page=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/json
last-modified: Wed, 31 May 2023 13:01:12 GMT
vary: Accept-Encoding
etag: W/"64774518-12f9"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WQ7IEntvZ7rOngMcRsgYKx7D3CV%2FrbaKrVZd6b%2F5XFIpM2NP3YGNmVy1y39wvaPfc9fBBiXFKk26k1wC9KJTxNFvUg83tl2iOBH6TWw066idfAWaBcWh%2BBI91CfWdO839Sj8iKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eef0bc9b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/css/sweeps-survey.ecda4c3e.css
172.67.178.228200 OK 84 kB URL GET HTTP/3 ichauquesurvey.top/css/sweeps-survey.ecda4c3e.css
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash f4acc7a7f6dba608e585dea7e2deb2b8
0f848bf9a296ccd221fcacdd110be2d99e12e66d
31b8f61455be371e4af1e656407ed1005a41aadd98c9b0772fedd2614f8d9f4c
GET /css/sweeps-survey.ecda4c3e.css HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=83713
etag: W/"64774518-14701"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2427
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIRTi0O00xBFWKQEZrNFo0E2bXPSB93GhdF8FJq5qwgW%2FOir9qPrYP6IJu02EY6dft6v8pVGPJ8%2FrXEz7zHX3BbDilveBiZmIDVeoOTjuLXKrRJoTuwyVclBS3wH2rfiZKknFAs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed58ebb4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ichauquesurvey.top/js/_rtc.ac975031.js
172.67.178.228200 OK 11 kB URL GET HTTP/3 ichauquesurvey.top/js/_rtc.ac975031.js
IP 172.67.178.228:443
Requested by https://ichauquesurvey.top/sweeps-survey.html?z=4817929&offer_id=2755&var=PropellerAds&ymid=SoBG4ikDiix5q7e8VBM7ma&ymid=SoBG4ikDiix5q7e8VBM7ma&utm_campaign=PropellerAds&utm_medium=4817929&utm_content=zd_public_v2
Certificate IssuerGoogle Trust Services LLC
Subjectichauquesurvey.top
FingerprintDF:74:80:AF:03:49:F0:1E:DF:08:C5:B9:E0:98:AC:AD:AF:DC:C1:E5
ValidityFri, 26 May 2023 09:31:04 GMT - Thu, 24 Aug 2023 09:31:03 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash 947357b088fadcacce60a443b015f9be
a1f1339ff23a581cc7ef37cf502cf71453aa3d2d
24ed11341d8fa8d4679665e6268020dd115667d8c27ccbe6eb54c015b6dadcd2
GET /js/_rtc.ac975031.js HTTP/1.1
Host: ichauquesurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 31 May 2023 15:50:08 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"64774518-2bb5"
last-modified: Wed, 31 May 2023 13:01:12 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2427
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ou9ittNabH9M9ddkGnGhRiWTpZ%2BLByU8CRfIx%2FlegZb%2B35tzRMZYhEFnnwet6pZJpsxy39nSpSX5i2KXoMSIRpq%2BFEhpMr0RhiprcyirVX31Uk%2B1YOhZnmXKPDZWwGpv6dk99gU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d005eed48d0b4f7-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400