surveygett.com/link?z=5982953&var=474_89a3984a-749c-48ba-be56-29d12d6d1b93__&ymid=647c9f2b6ebed200019a27a6
139.45.196.64
0
URL
surveygett.com/link?z=5982953&var=474_89a3984a-749c-48ba-be56-29d12d6d1b93__&ymid=647c9f2b6ebed200019a27a6
IP
139.45.196.64:0
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=5982953&var=474_89a3984a-749c-48ba-be56-29d12d6d1b93__&ymid=647c9f2b6ebed200019a27a6 HTTP/1.1
Host: surveygett.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 04 Jun 2023 14:27:12 GMT
content-length: 0
location: https://trebghoru.com/link?z=3956710&var=5982953
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: ff902f4d2ae5d49d53ae6ae78950d8b9
link: <https://trebghoru.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=61d3150323294ce5a8076bd39222bf7e; expires=Mon, 03 Jun 2024 14:27:12 GMT
oaidts=1685888832; expires=Mon, 03 Jun 2024 14:27:12 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
trebghoru.com/link?z=3956710&var=5982953
139.45.196.64
0
URL
trebghoru.com/link?z=3956710&var=5982953
IP
139.45.196.64:0
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=3956710&var=5982953 HTTP/1.1
Host: trebghoru.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Sun, 04 Jun 2023 14:27:13 GMT
content-length: 0
location: https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp&autoexit_86400=3953544
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: dc5a9e08faab5f4fda875a493c1e4a44
link: <https://erailsiwsurvey.top>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=9f4b426228b0471181b265727fafe6d1; expires=Mon, 03 Jun 2024 14:27:13 GMT
oaidts=1685888833; expires=Mon, 03 Jun 2024 14:27:13 GMT
OXCCLK=4105106.1; expires=Mon, 03 Jun 2024 14:27:13 GMT
allcnt=1; expires=Mon, 03 Jun 2024 14:27:13 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
104.21.55.218
200 OK
1399
URL
GET
HTTP/3
erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (2572), with no line terminators
Hash
2e9de7b6778ce3f6199aebfb661f9523
891c3fed1af8c7713e55934831bacd3a3b595e3f
1fa9bb8f2331f7b0dadd0d87aa97c1077cb70f5b2149816f931a5dddc65a8ab8
GET /js/s-storageService.js.2dc48dda.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:13 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-a0c"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3667
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yRxXIf2gNDb5fOeey0RwcgDhjoIjXI8A5yjMgW1aew%2FBJm%2Bof1dDISa%2FnGzki9AoDmnyIZ8bTF2fgAsJRGJkJZmPHFeTcZRHxls8WS0sD%2Fo8vp9sQW18GREIH5jCuq0T7ALxH70%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafa7d3eb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_rtc.692696d0.js
104.21.55.218
200 OK
4823
URL
GET
HTTP/3
erailsiwsurvey.top/js/_rtc.692696d0.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (11189), with no line terminators
Hash
769aca51bf83343eb2ac227aedcd4ff3
2a193572dec77357bdbcc9d02e629afb942fe61b
7110ad0251bd71ba0caa74c691d850c8e3ea55d53d6195408d21d4777e2cf293
GET /js/_rtc.692696d0.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:13 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-2bb5"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3667
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I7tWvFa2FzEaycssekOxVD2FV75877Cv4DrGPAwv7aPkpSquZci6%2FWsFaucUsOX9V99o6%2BZoTO%2Bzu7d5p%2B11XIi2kU5rbksbizOb6aiwr2M425%2BjY%2BL9IAXRV1H75gWyHhdL3xE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafa7d3cb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/css/_core-survey.26c0898c.css
104.21.55.218
200 OK
995
URL
GET
HTTP/3
erailsiwsurvey.top/css/_core-survey.26c0898c.css
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (3187), with no line terminators
Hash
2e6143d07cb0a0273cd0fded0cd7b430
4853285adf3a468cc8a42b1c6f17d8353cfef896
f2690b871425a66071365ba5be475a5089e8074dbdab7df95a71bbee62e2f5fb
GET /css/_core-survey.26c0898c.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=3194
etag: W/"6478a1f0-c7a"
last-modified: Thu, 01 Jun 2023 13:49:36 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NeFN0pxIa6eR0Puw4oPau31RhsAiaiJLf%2F%2BntGwA2d82o38MWW8OQm2hqa4JfWHFygx%2FOFRMhyvvxuu1lBe0Au2BcdUK0%2B%2BuUzYIVrwBcqg%2BtE2Uf%2BCFhIR9gVONqnNNTCHwdr4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafd387eb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/unnamed.jpg
104.21.55.218
200 OK
1378
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/unnamed.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-562"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bYoxaoYHY0x2mGdFbRmBr0NkdoKsIjlpVoQedVSvQ55X25dmMVGpXGPxjQZqFLsztjPxVpbQZZLkVhWh6mRWbTzb6%2F4dyHy25OjomCsOlDebsTHrOoolDp%2Brtb5SIS%2BMYy6nEFM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20daff8b56b4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/pfe/current/micro.tag.min.js?z=4842422&sw=/sw/sw4842422.js&var=3956710&var_3=689230115005272706&var_4=null&ymid=5982953&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
104.21.55.218
200 OK
14073
URL
GET
HTTP/3
erailsiwsurvey.top/pfe/current/micro.tag.min.js?z=4842422&sw=/sw/sw4842422.js&var=3956710&var_3=689230115005272706&var_4=null&ymid=5982953&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
C source, ASCII text, with very long lines (42367), with no line terminators
Hash
e2c1209fa034e82830b27b2c7e00a7dc
0a3057e56de2d45bee9443afba1823ce0629f199
ea6ad99d1789576a76dcb7c3d970a1fb9c81b4b0c493eafc64023b85686a2bcd
GET /pfe/current/micro.tag.min.js?z=4842422&sw=/sw/sw4842422.js&var=3956710&var_3=689230115005272706&var_4=null&ymid=5982953&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-a57f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P8Smi5nkbBcxBhmAJMRv5qnSbK1umg6UR7Fuj%2BKKetHaTGV6bxioCAwPiZQ4NDPgOw5lIV8v37xlbwaDu%2FmA4vOfZxzVvVnyS30y%2FXEXBugeNLZn0UAj%2FjvuAyk06hskPT%2BVN0I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafefa99b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
104.21.55.218
200 OK
3055
URL
GET
HTTP/3
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (7118), with no line terminators
Hash
d0895c16e97f4fa5d6c7703b741a4a5e
8a3c26b1a516b4716799ab6e806bf063ba016651
11e8791573303e203816d632bda1b06fbb360ef05f7c303260e451428093fe2a
GET /js/config/data/sd-1779001.js?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1bce"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6565
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Q9mVu%2Fq68MTM%2Fi7iqAifoF%2BrX5fUbPjQ1r7VIb45aVcm7nGgTFFUKJebvHchHUIuSLexDvi25IArUSWyKrwsRYYzUmIcU52c6aW0txI%2BPlFEAqlrih6sj7gUK8UEJDknGTD6Wc8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafe69dbb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/unnamed.jpg
104.21.55.218
200 OK
1378
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/unnamed.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
449aaf5a54e3fe3aa4f0f5875bede090
b2b897362626700277b7f8baca8b1f292d08b7e5
4200f94af9e21196c339a50a85d3d50c769e8655857fdaf67df6e99678b9ad59
GET /img/comments/unnamed.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 1378
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-562"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Bvb%2F%2Fbe0G6lQR2uXWjL3BmSTNHj%2BeADGk6dRkf4rS2mFvsD%2Bhu%2BEL11xI1Z6oK8brW9Q2%2BrYD7nxzRcc0mXuK%2Bz%2B3WWWk9AFKGBpNNKU52pP3C006rR6zNHcSfZMUqsy%2F82DMX0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c1db4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-1.png
104.21.55.218
200 OK
6577
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-1.png
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash
8f9a954bf05965bb41cf97a7ddb7a375
de9db936bbea75043e08a55d1f371678fca2270c
a787bd40650924a7bbc61d6ea0bbcaddae4b3129fd8028b68c3629210e41e26d
GET /img/comments/person-1.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/png
content-length: 6577
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-19b1"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hEZy5ucEluuY95i5iwFn8kyOJv4ZML7mMgwwXRnLW8OW1yOpKgaw91L4vCVaYxDMSEREk0XlszyiwH82ipEZSJ2oLTEMZmCP65tuOZfv%2BNEg8632cvY%2Bf1w0Ot88T20iz6eXwH0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c1eb4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-14.jpg
104.21.55.218
200 OK
5392
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-14.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
6012ff0d59aa6a34aaca1ea8f2fa88fc
ef59662c9b666106486039e9f1deb40fb4a8ff77
2c020310e91430067c7128425f14ac0ff1710aea5e67c144a8fceac46311182d
GET /img/comments/person-14.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 5392
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1510"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=koTsnWkJtCEUFuLtiwd%2Fu%2B9mUfd%2B6drc9EM7Dnk%2BZCTexS%2BHvT8Gj7jwkPyNk1mKp9eIVtvnJ74TG1AiRpnxOCuIrf8WPV1fr%2FcdtM4H6m9aIrxpRQ7553Ao814FDt76h2DLPL0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c20b4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
104.21.55.218
200 OK
6606
URL
GET
HTTP/3
erailsiwsurvey.top/js/config/data/sd-1779001.js?v=10
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (7118), with no line terminators
Hash
d0895c16e97f4fa5d6c7703b741a4a5e
8a3c26b1a516b4716799ab6e806bf063ba016651
11e8791573303e203816d632bda1b06fbb360ef05f7c303260e451428093fe2a
GET /js/config/data/sd-1779001.js?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:13 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-1bce"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6564
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KNHzPyiOA%2Blo3Y0%2BMcKgPVa3z0kJrm24w1G6y1GbSzThnY60sDeQ1YoJCLCGOvKkYJkAeCJw7MKLNSwWQoR%2BcexQ8O9gX9Xyuq2%2FMJf%2Fo7RIw6R8IvAxHgvx6Yw3J7harMpXhtI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafc3f58b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/icon-survey.svg
104.21.55.218
200 OK
7209
URL
GET
HTTP/3
erailsiwsurvey.top/img/icon-survey.svg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1080)
Hash
9612f51aebfc959fbe20466738ad7a35
40018ba48bd4ed13c219ceb9efdeccac7902ff4f
a35df0cc8723374ad7b9b6a99e7b07b23a32783d0ae1897fbf8dbc6e6ffe11d6
GET /img/icon-survey.svg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/svg+xml
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-c19"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KJoPJV8VSOqYheRb2ZfLE7Z70Ik3Jp%2BuDaUnE7atBh%2BNImD8en4x1JKbwfSDwO249ecIfGPvphRfCJj%2FmDH42EN7Q9teIVFSaTICAOf1QBd74vcYR4OOyy5JQKSWTx0uEk6gZqQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafe59ceb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-3.png
104.21.55.218
200 OK
7368
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-3.png
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
PNG image data, 100 x 100, 8-bit colormap, non-interlaced\012- data
Hash
2f62e53b6333bc904be22a37a1fd0ace
6e972fefcbe0193d9b28817c47c1ceab2a0235d1
9128194f1b1bf44435a3e80f994157b94a40a3365cd8f0794dcadb41a24c3b41
GET /img/comments/person-3.png HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/png
content-length: 7368
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1cc8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BFeJE9WNN3QNkVGMjOVssUMnW5f9%2BhAOCeAGFuMU3NfDB2BbRWfOwSkstBOHGNOT4Zylzzt4%2FkcSs%2FrgWKTf7a3ktYord4loLxEU5qyQ%2BpmzDjxJ0SZSdqo0TZ2xgmKZwxF6QgY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c2bb4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-6.jpg
104.21.55.218
200 OK
4392
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-6.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
be9ff88491a5bc0745579a3813eb2cbe
870f88a7fae9fdd928af33f47c5ffdddc6a4082b
698d413ddf6b2ec37acf0e982237d239bd912cb097e243cb355855ac2b8548d3
GET /img/comments/person-6.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 4392
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1128"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qOU9oI7ofiKRHsr2A8UPK%2FUY1nsc6voPrAUMXWspJANp24q2GMfxeIDcyg27S4w%2BR7dwDPPQcaIzrjmbVHR06x2Ge6VjnbHgxR%2Bk9wUY%2FHATA%2Bo9tTIfginlyCU1g1qGXU0OjVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c29b4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/css/survey.2bfeef83.css
104.21.55.218
200 OK
21868
URL
GET
HTTP/3
erailsiwsurvey.top/css/survey.2bfeef83.css
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (65536), with no line terminators
Hash
ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:13 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6478a1ef-1041f"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3667
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8LXgvKLtmcht27yMWj%2BVlEaXUqQLV77Owd1CJ1R5G7PYE%2FukUU2SLbl313nTbN%2FhraPUsMCwrNJIk%2FCnyP5Rq6a%2Foaz73%2BGIOFeIr5biQP7mK3hHi6yVcTStVnIEW16f5q%2FLpO4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafa8d67b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
104.21.55.218
200 OK
5165
URL
User Request
GET
HTTP/3
erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
IP
104.21.55.218:443
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4701), with no line terminators
Hash
0913cd12e360bbd1a54efa0cf32f4e1f
357c9c9340abefa7f983cbd236cea4919fd6ea2c
75eee425fa9973f1d45f34289609abfac1d38813f17e3a68ed6509b702bb2f53
GET /survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: text/html
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6u0GOR8h6R006MfIPppzzKoPWaT%2BhX5SiTmPjd1FU4HYg1%2BlsUv2Ryc5ciDcE4T3UU6Sn9A2GoRVqT4TtMGO97NYx%2FSclLn%2FXYquPK4AuuqF9iPjr56OlQfD%2FenjPDNXLhRv8v4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafc2f43b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-9.jpg
104.21.55.218
200 OK
5190
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-9.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
529370f9fd3b0f4da6c81ca91a931155
1a4c3e0e7af1ce30dc2ca18d48b5fc3f1b40aad3
cdf1b8dcdce4e9b76157ce90e086ebafb100063eaeb091e97087d97f5d0fb50b
GET /img/comments/person-9.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 5190
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1446"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CDq6vgJE%2FbyW%2Bs9TGEuTEtNdEQ4HcpBF7bzafLi0wuit9RKyJduminOnuJhIGarVhDq0gHwzd0dMnv1AvhQn213WlnJPdsp%2FG%2Bs41%2BKg%2BFaWZgZoVkEQc0boj6VxOZipzHoR3gs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c2cb4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-10.jpg
104.21.55.218
200 OK
6178
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-10.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, software=Google], baseline, precision 8, 100x100, components 3\012- data
Hash
044ab37551bfe632f53b8f15d991f36e
77fdc6210608e5e36e1d36ac7fd867104cb20d9e
36adcb32026c016feaff678063911fcc9e7985e9f0c56bb1daa776f98964ef91
GET /img/comments/person-10.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 6178
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-1822"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kEQlu1L%2FPYqBzQLoxDhPvjA%2BvVQEeBNYaSN2tNbZghdm7bptgS%2FJtBeGz7%2BnZrUM6JefGlQ5T%2B%2FBwQJUwSjC8StA8YYwyfh8W9eAgywMD0iCLwpPWNOoF%2Br0jViYcn8B47m1w0g%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db004c2eb4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
104.21.55.218
200 OK
5071
URL
GET
HTTP/3
erailsiwsurvey.top/js/s-storageService.js.2dc48dda.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (2572), with no line terminators
Hash
2e9de7b6778ce3f6199aebfb661f9523
891c3fed1af8c7713e55934831bacd3a3b595e3f
1fa9bb8f2331f7b0dadd0d87aa97c1077cb70f5b2149816f931a5dddc65a8ab8
GET /js/s-storageService.js.2dc48dda.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-a0c"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yqvJSxGOdMAT7gi0vRKiSvPOu5HVa0bZuFVWKdY2U7OhXlinoKGxXP3WqlOPR6BzCWoj32zCNRcJopo9y5%2FC0oU%2F3dN5RyKer15%2FQVsOnae6k7pNGlLboc7CXYsZjvOWwyqP0%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafd1854b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-13.jpg
104.21.55.218
200 OK
3172
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-13.jpg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
a3364ed9e772ae6f696b814072001bf8
b8f34c657c31bf1e4d42b5d864b2519493d80e92
88f30b8552d0ab928d895390b337a0049405f3b1e8446631e606ba787e1205e1
GET /img/comments/person-13.jpg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 3172
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-c64"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kW8mVfyYZMtbO%2Fztok9ha8c8ByVW1AkoWVg2jFV0%2BRHcugNMdQstJlUo2oOdmLDAnTnPxUQcZfFnzZigqizn4kmNrUbaPqapCK8YjtjcNeVNa0ZBtTLqVYlT2r7jW82w0umZME4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db005c36b4fa-OSL
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/img/comments/person-12.jpeg
104.21.55.218
200 OK
3519
URL
GET
HTTP/3
erailsiwsurvey.top/img/comments/person-12.jpeg
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 100x100, components 3\012- data
Hash
c937339f4ba54ff7dc150b9865c29084
44206828ca23cbed303193bde1dfe47bdc532972
8e872daac17de58d352c9f4082e6e35af76a8b2138c142a8cf0fbacea195c73e
GET /img/comments/person-12.jpeg HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/jpeg
content-length: 3519
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: "6478a1ef-dbf"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rIbGXnSGr9PQxGAyXFhwpDWCJCsEQdeJmVKILJXn7ScS%2F8NjIkr80tzyYfHlYtqPmGH%2F%2F68GpxiojIo9jHSXFu669NXAXKio5fN%2Frm47J2DMwa4sugi96%2FnCo2xX6i1U123jt0E%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db005c30b4fa-OSL
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
142.250.74.164
200 OK
556
URL
GET
HTTP/2
www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
142.250.74.164:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintA8:95:C3:CB:D6:3F:BC:0A:7D:FF:36:72:5E:2F:56:26:9F:EB:77:0E
ValidityFri, 19 May 2023 12:58:13 GMT - Fri, 11 Aug 2023 12:58:12 GMT
Magic
ASCII text, with very long lines (852), with no line terminators
Hash
2f8167a83a96c015814efbdcafa4ba64
10d0d3111342f2741856701a4403e31ee8f6d155
fb7de641340e1ef87fc299914f3a18ddbd745d01e1194103c3c948bd748cd858
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
expires: Sun, 04 Jun 2023 14:27:14 GMT
date: Sun, 04 Jun 2023 14:27:14 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 556
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
erailsiwsurvey.top/css/survey.2bfeef83.css
104.21.55.218
200 OK
11407
URL
GET
HTTP/3
erailsiwsurvey.top/css/survey.2bfeef83.css
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (65536), with no line terminators
Hash
ba8ddbfa60d2feec516710cd5de1746d
9ddfc2f60deda512e71fa888c546c4300e3a530e
04ea2783c47b74e28c9583983c12e1ea4ac25e5ab50f0270829687607a03a782
GET /css/survey.2bfeef83.css HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=66591
etag: W/"6478a1ef-1041f"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=chghWLwWhjRge9NELjjt%2FTFNRyku3JFrN4xtknb4NT6w25Hm6wWU%2FB9U2hMacYZqwZtuo9D%2F980tK0%2F1Z2crMZeA0pC6%2BwmDw3JKNu2hzeAYAzc3EIQo9vMWI6bENLU88dPO4Og%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafd3883b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/config/dict/cookie-consent-1.json?v=10
104.21.55.218
200 OK
3415
URL
GET
HTTP/3
erailsiwsurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
JSON data\012- HTML document, Unicode text, UTF-8 text
Hash
4f1c632e971c4261f927ed0cf67bfdee
18c72b10719ca98b61b1f1f84e4b01f0ed8b3763
2bfa8e9b4326caea44f0d0c0345a31f34f19d47ae2e60fbc7c557df9ceffdca6
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kPSE3B1k3ox7HLFNbLVk8%2BQ%2BNY3CpAv40PLsht0%2FdTgn3sBVZjQzThNOyQ7LRZlp8LHxH1%2FWM7neXBLyIjaxMTIeoRgFcmwhT%2Fap%2Fb0TBuh1LNr%2BimNcCAtDB%2FpFaRQ5An1uwxY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafe89f4b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/v-index.js.a18034f4.js
104.21.55.218
200 OK
13513
URL
GET
HTTP/3
erailsiwsurvey.top/js/v-index.js.a18034f4.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (40296), with no line terminators
Hash
3698267f8797b04e520279c94f8e0805
6d3badcf82c2faa17f61efdc44beff2267fa84e4
fe3a9cbf06b7238b24211ed6af8cf947aa8fcfbd0d6a81601993639a48431f20
GET /js/v-index.js.a18034f4.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-9d68"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=L0v6sf3l4sS%2FJAdo8e68OyRARgj3Z2BIHFyBV14OOCvulKBCH9oKiGP9nnmK4gvWkv%2FJJY1onsCXs8giqRE0Eb4%2BRsInhqwju%2B6fugD80miwP6PBUvlEGx5K82HChGbTU7GAwBU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafd185bb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/favicon.ico
104.21.55.218
200 OK
1161
URL
GET
HTTP/3
erailsiwsurvey.top/favicon.ico
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash
668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: image/x-icon
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3251
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V8%2BdGnMPj5fuvhTADz0cy28TMPdrtYItcRbaFobti4tRSijUJ6ABqoAjzvTJkVgV1oAp%2Fu3KmIgvnoLyKj46RSBFMw66JSa98S%2BfjZxHSRW9ctEbBK1ZMgOuVkrgT2YjdAG1RAA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20db01ddf9b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
216.58.211.3
200 OK
166186
URL
GET
HTTP/2
www.gstatic.com/recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js
IP
216.58.211.3:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintC8:5A:9A:D9:6A:F5:00:15:5B:5D:99:FE:FE:CA:1D:7C:19:4D:F8:D5
ValidityFri, 19 May 2023 12:57:42 GMT - Fri, 11 Aug 2023 12:57:41 GMT
Magic
ASCII text, with very long lines (749)
Hash
ee07ba65373413be83ec0d45887c2a44
13646acedb5d781fed2599c46634b4e58b8217db
d946e8f3fb4fe90a5ae3027b91a76703106e2c5c1d762fc3fc230895db7b6048
GET /recaptcha/releases/sNQO7xVld1CuA2hfFHvkpVL-/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 166186
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Jun 2023 13:34:38 GMT
expires: Fri, 31 May 2024 13:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 30 May 2023 00:01:16 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 262356
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131
471
IP
142.250.74.131:0
Hash
c8c4fd34484b10881179e1a092434fd9
b37e3b04da5ba68bf533fcff188ac29b8eb27b3e
e5ccf7ef803972b97b8bff04fcab8af38c84d5a832ab096c7fd5ace5e56bf92c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 04 Jun 2023 14:27:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
104.18.15.101
471
IP
104.18.15.101:0
Hash
dc5b07fe1615d68b82c10372a9a494d9
0b59b437171859b898d1ab432b5979ea105b0272
184c24bffe7600ce8aee9e68816ecd4bf2211b57e10ef72bce520457b90e0ea1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 14:27:15 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 01 Jun 2023 05:19:53 GMT
Expires: Thu, 08 Jun 2023 05:19:52 GMT
Etag: "0b59b437171859b898d1ab432b5979ea105b0272"
Cache-Control: max-age=313456,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7d20db02eb82b529-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
37.48.68.71
200 OK
12
URL
POST
HTTP/1.1
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
37.48.68.71:443
ASN
#60781 LeaseWeb Netherlands B.V.
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Magic
JSON data\012- , ASCII text, with no line terminators
Hash
adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1532
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Sun, 04 Jun 2023 14:27:15 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://erailsiwsurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
139.45.195.8
43
URL
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP
139.45.195.8:0
Magic
GIF image data, version 89a, 1 x 1\012- data
Hash
b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=9ec7431e969a4d749c99589a4cbc6f40
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 14:27:29 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9ec7431e969a4d749c99589a4cbc6f40; expires=Mon, 03 Jun 2024 14:27:29 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
cdntechone.com/stattag.js
188.114.97.1
200 OK
18521
URL
GET
HTTP/2
cdntechone.com/stattag.js
IP
188.114.97.1:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
Magic
ASCII text, with very long lines (17871)
Hash
0fdff67feab23cc69ecfb6800fc54cb7
eb84c650e6d27e290795207b1f37dd7b67f2aa06
456e420aecd5ac679cc2bcb33daf7c063f54894fd076e99e05c06629234d3378
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:53 GMT
etag: W/"646736c9-4859"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1417
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JL4%2FHviMmWlyyoWTFAz1FyAEtDp841or%2FNo7Zi%2BaUp778ORq%2Bagi8HrFWCyWdQIkcyzxHTM6rnQFJGuE6UHqq7UjZqk5cesbGrZFzRkXcw6FacDNrUYze0jmbwlFkFIj%2Bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7d20daff6fb10b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/_global-config-sd.2d740028.js
104.21.55.218
200 OK
1410
URL
GET
HTTP/3
erailsiwsurvey.top/js/_global-config-sd.2d740028.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (1432), with no line terminators
Hash
2534e90a7319b79c19d3a8339cd9fff8
c49339e6efca9603e9f8fc298369e00772237187
2220421642628bd706e44ff9cf8af6607787ea3cb839ea742af4fe11ee84d394
GET /js/_global-config-sd.2d740028.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-582"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3668
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kbx7bdr0%2Fdnr%2Bkpc32G09wDHzn9nQWpHkYF8LEH3kBPTcj1vs46zct%2FhR6FYbsdDDZS4BDadY9sr4mAgdPXZAjoe%2F8p%2BMuQQ%2FzIUpvzRmjIE1TqMA5CXmjfi1sVjAB9htdx1QTw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafd1850b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?
139.45.195.8
200 OK
65
IP
139.45.195.8:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerLet's Encrypt
Subjectrtmark.net
Fingerprint84:56:36:C3:24:DE:FB:F0:E7:EB:EB:9D:C8:B6:28:31:B5:3C:8B:80
ValiditySat, 06 May 2023 08:48:01 GMT - Fri, 04 Aug 2023 08:48:00 GMT
Magic
troff or preprocessor input, ASCII text, with no line terminators
Hash
76a27a7e977538a8f32849588225e913
f63ad69b0830653855e011cda5b55c1e1c57c366
1f6ff2903009bf28f9ef7c3722d21a74b48c94fa71209d3b8436e21a7eb92a16
GET /gid.js? HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://erailsiwsurvey.top
DNT: 1
Connection: keep-alive
Cookie: ID=9ec7431e969a4d749c99589a4cbc6f40
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://erailsiwsurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=9ec7431e969a4d749c99589a4cbc6f40; expires=Mon, 03 Jun 2024 14:27:14 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
erailsiwsurvey.top/js/config/comments/en.json
104.21.55.218
200 OK
4525
URL
GET
HTTP/3
erailsiwsurvey.top/js/config/comments/en.json
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
Unicode text, UTF-8 text, with very long lines (5176), with no line terminators
Hash
0f8a677240ca082b8875f3c8d3bf5c42
19641ee3e340098b44d1d248e7c1a99dd0daafdf
2f5cff997105c8b995ec55f36e2656e14e1676f23244471f6115bc1d04c821c1
GET /js/config/comments/en.json HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0; loaded-page=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/json
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
vary: Accept-Encoding
etag: W/"6478a1ef-11ad"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XRDy0MLDZC2X2LUnyz9tPri4c6XW4AxWp9u%2FGnN3aSsQGtxtyCnZOViwFnM8jFsTUPHzlbRBnKjmvsgYBHp2COj6LjRaR5f2VyPyv8Se4RZI11ZicJNEshZBQLNNlF6%2F0anSJAM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20daff1ac4b4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_is-browser-supported.c49ec082.js
104.21.55.218
200 OK
1015
URL
GET
HTTP/3
erailsiwsurvey.top/js/_is-browser-supported.c49ec082.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Magic
ASCII text, with very long lines (1102), with no line terminators
Hash
347149a5f2db6ba9662854836bd194ba
dad9564747ff98e7449226386615f6846b11920e
c84c175bb7a22aee56cd585dfeec157387639c062a12b726f8f4dd3f0c36cc7a
GET /js/_is-browser-supported.c49ec082.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: isCookieSyncABTest=0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Sun, 04 Jun 2023 14:27:14 GMT
content-type: application/javascript
cf-bgj: minify
etag: W/"6478a1ef-3f7"
last-modified: Thu, 01 Jun 2023 13:49:35 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 1
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=enEGfn4uOr0eOFsDp7qizfk94TngcR45pGs7NeJD73q8qYrDNcbb3z4dFo6AcuArXyf3UKMMay%2Bjvi7p7MbRLosbhC8ncara5V1lh7yIL8sgx5CGVOTub7miXeFKaacqsDNTFTI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7d20dafd184eb4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
erailsiwsurvey.top/js/_core-survey.2e2c57dd.js
104.21.55.218
200 OK
229458
URL
GET
HTTP/3
erailsiwsurvey.top/js/_core-survey.2e2c57dd.js
IP
104.21.55.218:443
Requested by
https://erailsiwsurvey.top/survey.html?offer_id=1916&geo=NO&oaid=9f4b426228b0471181b265727fafe6d1&s=689230115005272706&z=3956710&var=5982953&testinapp=&autoexit_86400=3953544&utm_campaign=5982953&utm_medium=3956710&utm_content=zd_public_v2
Certificate
IssuerGoogle Trust Services LLC
Subjecterailsiwsurvey.top
Fingerprint96:36:B7:B4:69:65:04:6B:5C:B3:4F:DD:F0:5F:BA:2D:80:2D:91:FD
ValidityFri, 19 May 2023 17:30:27 GMT - Thu, 17 Aug 2023 17:30:26 GMT
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.2e2c57dd.js HTTP/1.1
Host: erailsiwsurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accep