typeingclub.com/
248 B IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 2003ffa02dcb52849f215d1827075ea7
f78f3fa5077d839e882b6bc5c070f28b0d1a5c41
37dd9a56d25c8c7ff37c5f40afbea65677fa395895c7b0f27470dac5f31ead92
NIDS Severity Alert suricata medium ET ADWARE_PUP Win32/Zonebac Traffic Redirect
GET / HTTP/1.1
Host: typeingclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 23 Sep 2023 20:28:53 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
typeingclub.com/favicon.ico
114 B URL typeingclub.com/favicon.ico
IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /favicon.ico HTTP/1.1
Host: typeingclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://typeingclub.com/
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 20:28:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
typeingclub.com/
181 B IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 549e602f0c89f29b992253ec4d542b04
5930ca4ed70f27ae17ef4e5fa4738bdcef22a277
a2dc1aab6ddf897ce25e64ec9e37ab5a12e3517f529c31272b7ea8898b729f8a
NIDS Severity Alert suricata medium ET ADWARE_PUP Win32/Zonebac Traffic Redirect
POST / HTTP/1.1
Host: typeingclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/x-www-form-urlencoded
Content-Length: 12
Origin: http://typeingclub.com
DNT: 1
Connection: keep-alive
Referer: http://typeingclub.com/
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 23 Sep 2023 20:28:53 GMT
Content-Type: text/html;charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
X-IFID: 1
Set-Cookie: ipc=eyJ2ZXJzaW9uIjoxLCJzdWJJZCI6MywiZm9sZGVySWQiOjEsImZlZWRJZCI6MSwidHMiOjE2OTU1MDA5MzMsImhhc2giOiJlNTc5OWVlMyJ9;Expires=Sat, 23-Sep-2023 21:28:53 GMT;Max-Age=3600
Expires: Thu, 01 Jan 1970 00:00:00 GMT
Content-Encoding: gzip
typeingclub.com/favicon.ico
114 B URL typeingclub.com/favicon.ico
IP
ASN #27257 WEBAIR-INTERNET
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 932da5a430ff6db1bc48425b567d56fa
e7e88023dbbc6346d354ffe9fb7db957888c2299
10174434dbe479c08b32ce3b42b70e7c6336647d29e4393483158d590d35c325
GET /favicon.ico HTTP/1.1
Host: typeingclub.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://typeingclub.com/
DNT: 1
Connection: keep-alive
Cookie: ipc=eyJ2ZXJzaW9uIjoxLCJzdWJJZCI6MywiZm9sZGVySWQiOjEsImZlZWRJZCI6MSwidHMiOjE2OTU1MDA5MzMsImhhc2giOiJlNTc5OWVlMyJ9
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Server: nginx/1.20.1
Date: Sat, 23 Sep 2023 20:28:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
q3.quotes.com/
11 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET / HTTP/1.1
Host: q3.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 23 Sep 2023 20:28:56 GMT
location: http://survey-prize.com/
server: nginx
302 Found 2 B URL User Request GET HTTP/1.1 IP
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectsmartfoot.com
FingerprintAB:4F:B4:A0:22:13:3D:7D:B1:70:20:81:E1:FF:CA:38:DB:02:35:2C
ValidityFri, 04 Aug 2023 10:15:22 GMT - Thu, 02 Nov 2023 10:15:21 GMT
Hash e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
GET / HTTP/1.1
Host: survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Sat, 23 Sep 2023 20:28:57 GMT
server: Apache
set-cookie: __tad=1695500937.3659744; expires=Tue, 20-Sep-2033 20:28:57 GMT; Max-Age=315360000
location: http://ww25.survey-prize.com/?subid1=20230924-0628-57f6-a583-8373fc384727
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
ww25.survey-prize.com/?subid1=20230924-0628-57f6-a583-8373fc384727
1.2 kB URL ww25.survey-prize.com/?subid1=20230924-0628-57f6-a583-8373fc384727
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (450)
Hash 32b7e136e1a9d7712833e45122deed7b
dd091733c553c52c96a6238f8268c5166b2461d3
cf52171091b1a88b80af17d4a1d45de08443a2224aac8eeda6da93c47158dfcc
GET /?subid1=20230924-0628-57f6-a583-8373fc384727 HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 23 Sep 2023 20:28:57 GMT
content-type: text/html; charset=utf-8
content-length: 1153
x-request-id: a3d4b3bb-34aa-45ae-a8c6-ee2059f506aa
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_vgbyKcdfP9zJx+aM/SH5JqPmDpbyJs5Ia+Sg357yGnaX8RphQKgmH5CPU05zL+R8en3Qgy62MRZzXgl+Wo4EQQ==
set-cookie: parking_session=a3d4b3bb-34aa-45ae-a8c6-ee2059f506aa; expires=Sat, 23 Sep 2023 20:43:58 GMT; path=/
q3.quotes.com/d0186428-5a4f-11ee-8475-308f5852fa86
170 B URL q3.quotes.com/d0186428-5a4f-11ee-8475-308f5852fa86
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 8e8fccb8489c40cb7477f2090e45d4c0
a8775ec0d8f5b926db683ff4f4e7fe7395895029
4bf849a6d662e025a6b04b2799873ff5b108b8ce157479639de9949fb363784d
GET /d0186428-5a4f-11ee-8475-308f5852fa86 HTTP/1.1
Host: q3.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://typeingclub.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 170
content-type: text/html; charset=utf-8
date: Sat, 23 Sep 2023 20:28:57 GMT
server: nginx
q3.quotes.com/
11 B IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET / HTTP/1.1
Host: q3.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 23 Sep 2023 20:29:01 GMT
location: http://survey-prize.com/
server: nginx
302 Found 2 B URL User Request GET HTTP/1.1 IP
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectsmartfoot.com
FingerprintAB:4F:B4:A0:22:13:3D:7D:B1:70:20:81:E1:FF:CA:38:DB:02:35:2C
ValidityFri, 04 Aug 2023 10:15:22 GMT - Thu, 02 Nov 2023 10:15:21 GMT
Hash e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
GET / HTTP/1.1
Host: survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Sat, 23 Sep 2023 20:29:01 GMT
server: Apache
set-cookie: __tad=1695500941.3834328; expires=Tue, 20-Sep-2033 20:29:01 GMT; Max-Age=315360000
location: http://ww25.survey-prize.com/?subid1=20230924-0629-01d2-b5cb-6fbbfdef2614
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
ww25.survey-prize.com/?subid1=20230924-0629-01d2-b5cb-6fbbfdef2614
1.2 kB URL ww25.survey-prize.com/?subid1=20230924-0629-01d2-b5cb-6fbbfdef2614
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (450)
Hash 9c47ee923c3db6bb7a2620190c9b4690
4ce6683296d49830aeef7b874b677506b80c0c6a
5b4513d1c987f9c0b3a32b9841d7dfc5592bfca6cc56f7b246c1120e2788208f
GET /?subid1=20230924-0629-01d2-b5cb-6fbbfdef2614 HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 23 Sep 2023 20:29:01 GMT
content-type: text/html; charset=utf-8
content-length: 1153
x-request-id: e056291a-929e-4a38-9d79-3028f1376408
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_cejUPvH5xFPFJGxVxngq+RA/+jef/49Iar0jZ9/RQSmK4czC3rIneucHXKR8un9bYJ6O1Iq7bUy+6BoR7Wrpkg==
set-cookie: parking_session=e056291a-929e-4a38-9d79-3028f1376408; expires=Sat, 23 Sep 2023 20:44:01 GMT; path=/
q3.quotes.com/d0186428-5a4f-11ee-8475-308f5852fa86?hr=1
302 Found 11 B URL User Request GET HTTP/1.1 q3.quotes.com/d0186428-5a4f-11ee-8475-308f5852fa86?hr=1
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /d0186428-5a4f-11ee-8475-308f5852fa86?hr=1 HTTP/1.1
Host: q3.quotes.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://typeingclub.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 23 Sep 2023 20:29:01 GMT
location: http://survey-prize.com/
server: nginx
302 Found 2 B URL User Request GET HTTP/1.1 IP
ASN #133618 Trellian Pty. Limited
Certificate IssuerLet's Encrypt
Subjectsmartfoot.com
FingerprintAB:4F:B4:A0:22:13:3D:7D:B1:70:20:81:E1:FF:CA:38:DB:02:35:2C
ValidityFri, 04 Aug 2023 10:15:22 GMT - Thu, 02 Nov 2023 10:15:21 GMT
Hash e1c06d85ae7b8b032bef47e42e4c08f9
71853c6197a6a7f222db0f1978c7cb232b87c5ee
75a11da44c802486bc6f65640aa48a730f0f684c5c07a42ba3cd1735eb3fb070
GET / HTTP/1.1
Host: survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://typeingclub.com/
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
date: Sat, 23 Sep 2023 20:29:02 GMT
server: Apache
set-cookie: __tad=1695500942.7716476; expires=Tue, 20-Sep-2033 20:29:02 GMT; Max-Age=315360000
location: http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
content-length: 2
content-type: text/html; charset=UTF-8
connection: close
ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
200 OK 1.2 kB URL User Request GET HTTP/1.1 ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (502)
Hash ce60f0443674fba1fc50b29ba5b61cf5
393be0e7746145fa24fc2a816996281617aff319
f80052c8d4d0ffef51c0086b9bc2ad65b9b764e502f9e0935756bcb910da3b72
GET /?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73 HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://typeingclub.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 23 Sep 2023 20:29:02 GMT
content-type: text/html; charset=utf-8
content-length: 1205
x-request-id: be3f6b9a-2fe8-4315-9eca-f517cf642961
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_hUTmNEHDnCPOrP6/QmviPw31UUA1Wf0pWw2pHyx7tbF8y8VsNBVJuu0uXD1M8q369dJpg1N1f1y14SXthfV3Cg==
set-cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961; expires=Sat, 23 Sep 2023 20:44:02 GMT; path=/
ww25.survey-prize.com/aDWDXFUbk.js
200 OK 68 kB URL GET HTTP/1.1 ww25.survey-prize.com/aDWDXFUbk.js
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
File type HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 3ef0d214cbad58830beddd8bffd52c13
b6afe664ac6da2b0afccae8fb8782acaa9b7c6c9
7128591ce2852ff92fd3ca220b9fdd6e99a901dd2e4164ba264e5a0b9a19965b
GET /aDWDXFUbk.js HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Sat, 23 Sep 2023 20:29:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 68406
x-request-id: 5a152e49-a402-4dd5-adb1-c267048ffe38
set-cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961; expires=Sat, 23 Sep 2023 20:44:03 GMT
ww25.survey-prize.com/_fd?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
200 OK 2.1 kB URL POST HTTP/1.1 ww25.survey-prize.com/_fd?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
File type ASCII text, with very long lines (3985), with no line terminators
Hash 4016a23394bbc36b7ec3fb70858f66ec
f0b594775f52fc38889fe4979a8186a351e0aa84
0209ea7a89fe1894f312278c6eecd33d0a7f0647737f86ef8405eabc0b13e9ea
POST /_fd?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73 HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Content-Type: application/json
Origin: http://ww25.survey-prize.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 OK
server: openresty
date: Sat, 23 Sep 2023 20:29:03 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 2055
x-version: 2.106.5
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961; expires=Sat, 23 Sep 2023 20:44:03 GMT; Max-Age=900; path=/; httponly
ww25.survey-prize.com/px.gif?ch=2&rn=10.791244279557157
200 OK 42 B URL GET HTTP/1.1 ww25.survey-prize.com/px.gif?ch=2&rn=10.791244279557157
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /px.gif?ch=2&rn=10.791244279557157 HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty
date: Sat, 23 Sep 2023 20:29:02 GMT
content-type: image/gif
content-length: 42
last-modified: Tue, 18 Jul 2023 15:33:43 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ranges: bytes
ww25.survey-prize.com/px.gif?ch=1&rn=10.791244279557157
200 OK 42 B URL GET HTTP/1.1 ww25.survey-prize.com/px.gif?ch=1&rn=10.791244279557157
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /px.gif?ch=1&rn=10.791244279557157 HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty
date: Sat, 23 Sep 2023 20:29:03 GMT
content-type: image/gif
content-length: 42
last-modified: Tue, 18 Jul 2023 15:33:43 GMT
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
accept-ranges: bytes
ocsp.pki.goog/gts1c3
471 B IP
Hash ec7e4fa5141f5c291141f904d913eb18
a1d02556789afef84c5c74b80eb45cd1604c3c70
9d7147857b1d24f497c88bbb8edb50fa9e27d8abbf81a4156bb5f97cfaf977aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:29:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/adsense/domains/caf.js
200 OK 56 kB URL GET HTTP/3 www.google.com/adsense/domains/caf.js
IP
Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type gzip compressed data, max compression\012- data
Hash 59b740390a5333792adde2d12b7bc5cb
ac42f3f27d04007d8b5d767760ea8250fb904556
1d2ed513f1fac48fe0a646d90b08b5dfefc60ad1151fa9f80fa1817688f02757
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 23 Sep 2023 20:29:03 GMT
expires: Sat, 23 Sep 2023 20:29:03 GMT
cache-control: private, max-age=3600
etag: "3529692135267428694"
x-content-type-options: nosniff
link: <https://afs.googlesyndication.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264
200 OK 3.0 kB URL GET HTTP/3 www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (13069)
Hash 27539a478e759ae1c92b3b2bacfcdfca
98f7842625539c314fc344d35669f68132f7e2e2
c95cfac79ffbe99c5267d189186a8337c43c274546e8f96b6a626d35448f0e99
GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Sat, 23 Sep 2023 20:29:03 GMT
expires: Sat, 23 Sep 2023 20:29:03 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-VkZbbBEs_DT1RWJXbig6Ug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 3018
x-xss-protection: 0
set-cookie: CONSENT=PENDING+079; expires=Mon, 22-Sep-2025 20:29:03 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/adsense/domains/caf.js
200 OK 55 kB URL GET HTTP/3 www.google.com/adsense/domains/caf.js
IP
Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2067)
Hash 604577f16f8a188b8d1c198518360aa1
210932b523055a60bdeb91595f23334e8593a1c4
582d4b1d4ccb1ef780c364edb606ed04b7ab86e68abd01cbaf2dd963ecc8015c
GET /adsense/domains/caf.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 23 Sep 2023 20:29:04 GMT
expires: Sat, 23 Sep 2023 20:29:04 GMT
cache-control: private, max-age=3600
etag: "11791791817676355318"
x-content-type-options: nosniff
link: <https://afs.googlesyndication.com>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff
200 OK 278 B URL GET HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff
IP
Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306)
Hash fe7dd8c3c629cc6e9cd6d3e4d3cbe905
59ef3b8e4a17169a4cb45fba65bf0d2bf49c8a18
5455d8d4b8ae5150039ff7a83a6679d4338a435945985fa9f8d0ecbea9ae2f6e
GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 17:58:04 GMT
expires: Sun, 24 Sep 2023 16:58:04 GMT
cache-control: public, max-age=82800
age: 9060
last-modified: Tue, 27 Jun 2023 17:28:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 20:29:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ww25.survey-prize.com/_tr
200 OK 22 B URL POST HTTP/1.1 ww25.survey-prize.com/_tr
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
File type ASCII text, with no line terminators
Hash 444bcb3a3fcf8389296c49467f27e1d6
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
POST /_tr HTTP/1.1
Host: ww25.survey-prize.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Content-Type: application/json
Content-Length: 1749
Origin: http://ww25.survey-prize.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
server: openresty
date: Sat, 23 Sep 2023 20:29:04 GMT
content-type: text/html; charset=UTF-8
content-encoding: gzip
content-length: 22
x-version: 2.106.5
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
set-cookie: parking_session=be3f6b9a-2fe8-4315-9eca-f517cf642961; expires=Sat, 23 Sep 2023 20:44:04 GMT; Max-Age=900; path=/; httponly
www.google.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=d6v512r8xul4&aqid=j0oPZfW8NoykxdwPituFuAY&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=566716232&csala=11%7C0%7C305%7C99%7C233&lle=0&ifv=1&usr=0&hpt=0
204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=d6v512r8xul4&aqid=j0oPZfW8NoykxdwPituFuAY&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=566716232&csala=11%7C0%7C305%7C99%7C233&lle=0&ifv=1&usr=0&hpt=0
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=d6v512r8xul4&aqid=j0oPZfW8NoykxdwPituFuAY&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=566716232&csala=11%7C0%7C305%7C99%7C233&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-dzKQzuQZRA2iXtFrD1RXwg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Sat, 23 Sep 2023 20:29:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=KkdIYZikeAu38DdFmFEX5XbyVrSX1Lb6VhGsuWGF-9MpjuVJSPRbofakqU3qBE123bJnMdHIhnAWCBKmUD8N62S4eMTz3iEsF8nmhH-7NchVZQQBcPwPJuPFMLMW_CxrxW3YlvDviV0y7rUssym4qsXyBDtkeB3_vItRKxXB2tg; expires=Sun, 24-Mar-2024 20:29:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+279; expires=Mon, 22-Sep-2025 20:29:05 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=om8shzsf9dkh&aqid=j0oPZfW8NoykxdwPituFuAY&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=566716232&csala=11%7C0%7C305%7C99%7C233&lle=0&ifv=1&usr=0&hpt=0
204 No Content 0 B URL GET HTTP/3 www.google.com/afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=om8shzsf9dkh&aqid=j0oPZfW8NoykxdwPituFuAY&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=566716232&csala=11%7C0%7C305%7C99%7C233&lle=0&ifv=1&usr=0&hpt=0
IP
Requested by http://ww25.survey-prize.com/?subid1=20230924-0629-02b0-b6c9-d9b21dd42a73
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis31_3ph&output=uds_ads_only&zx=om8shzsf9dkh&aqid=j0oPZfW8NoykxdwPituFuAY&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=481&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis31_3ph&errv=566716232&csala=11%7C0%7C305%7C99%7C233&lle=0&ifv=1&usr=0&hpt=0 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww25.survey-prize.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-3SZ1qzzT72beN08lW_9Ucg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Sat, 23 Sep 2023 20:29:06 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: NID=511=E-SOGzmRTWc--MB1zhb0i57GAZ4-jI4M8o9DHcmMUOkD3nohYhG7Ny971klsj6wHw2I5pde5lOupcq5lvxJMnmo0A_QHuGDwmopBTGxDmGPpXR70ZjLh4UOrhqamSVQKoICE4PZAjO_RVnYsYfZ3Ny8q16Y0rH6pNC-51ktehmk; expires=Sun, 24-Mar-2024 20:29:06 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+320; expires=Mon, 22-Sep-2025 20:29:06 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
200 OK 200 B URL GET HTTP/2 afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
IP
Requested by https://www.google.com/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol202%2Cpid-bodis-gcontrol97%2Cpid-bodis-gcontrol320%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol481&client=dp-bodis31_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww25.survey-prize.com%3Fcaf%26subid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2484450014652658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301293%2C17301321%2C17301323&format=r3&nocache=6561695500944070&num=0&output=afd_ads&domain_name=ww25.survey-prize.com&v=3&bsl=8&pac=0&u_his=5&u_tz=0&dt=1695500944072&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1264&psh=79&frm=0&cl=566716232&uio=-&cont=rs&jsid=caf&jsv=566716232&rurl=http%3A%2F%2Fww25.survey-prize.com%2F%3Fsubid1%3D20230924-0629-02b0-b6c9-d9b21dd42a73&referer=http%3A%2F%2Ftypeingclub.com%2F&adbw=master-1%3A1264
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash e81eb30a6c5589e7f39436e40b400822
ca2513ede010b3db00099335b809ca693c2cd65c
055ae1fef3be182534069c718e2dc0ab07d7464bcc3ded19553da07d37333657
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 17:58:53 GMT
expires: Sun, 24 Sep 2023 16:58:53 GMT
cache-control: public, max-age=82800
age: 9011
last-modified: Tue, 27 Jun 2023 17:28:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
74.206.228.78
178.162.151.164
103.224.182.207