ocsp.pki.goog/gts1c3
472 B IP
Hash c2070c44e02f0fdcfd57532bdd59c14b
dd7fd65dc30664eb36a8c3f948021f9ef96c11c5
5f8f77a4b8e5da799f796820145c5011770fa50d179296092d993f5af2400845
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 20:04:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dortmark.net/sync-metrics
200 OK 0 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:28 GMT
content-length: 0
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 629
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3e101ee5b38faf80c96f74f4917eceb3
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 88df3cc952c31240aab254059cdf92d5
fcd154b99afaa4edc861817a2d512c65f8e39527
5b3bf741ef8864b45e5d6e9370a99d36cc852ae472955523d708de2cdaaafa6c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 20:04:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ibekraiysurvey.top/img/comments/person-1.webp
200 OK 1.1 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-1.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
GET /img/comments/person-1.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1122
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FyQu1eDZt3ERS5c%2F17cSe%2BGzkpkVqj7e2bqu0wOwE2HNWTDIPoZ5n0CW4rTHeXKXeHA9jlte3CyiLrBC%2F9xRTagSGVTA%2FhvVJu%2BFLNkmkMmgLjhC0valOCpbdQo1GTaepjaO4ZA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bcfe56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-2.webp
200 OK 1.1 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-2.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
GET /img/comments/person-2.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1104
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6raK8cxWdspwtABSzi%2F3GzM2R0qhGeYAGuujp%2BTwjT3E2mJLWZcJtvxhf30RGBaM87M3e6o%2FZY3ptPfWwYL%2BOqGoKu42TyUCrASp9vbLjTpwpTiG1VxxttxwGZFaPLSG%2FpgYtaw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0256cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/unnamed.webp
200 OK 264 B URL GET HTTP/3 ibekraiysurvey.top/img/comments/unnamed.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 606085e7a74fd169da34f9fcb43ad12d
77226a50488fb48256d36f1810a136b69d635f74
df20f4c1d87cb10514a6d526dde70759334705d90a909df0e6cb130061ce1ea5
GET /img/comments/unnamed.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 264
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-108"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZQWTLoJRTO80qEiIPct0GDBQTRrHvGV%2FT8uZZcPluWTZMDANPnIF0YlZT06qYupFHYhXyWIBL%2BmyuxgMCh2PyUgTRxfYPMF%2FMsi1L8JJXt4xnXF%2B7JXPHhIFvJuPlXA4iENq%2Bfo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bcfd56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-14.webp
200 OK 1.7 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-14.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
GET /img/comments/person-14.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1672
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QLdOHEnUIWVzG5yJ%2Fmdlq51x3T4IxBGbj3j9r%2BwO642OWPjXCCpMqNx90DFoMBqXRhmuombnoe7z4tn7RyI3qEWiSVszjWIH7gq7SxxCPTGGHLCq1tLQgtDQnHUkMJShgkLeV1I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bcff56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-4.webp
200 OK 1.4 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-4.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
GET /img/comments/person-4.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1356
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eV413%2Bj3aTMu%2Bg%2F17Qzfe%2FDORHfz%2FG8Pxb9xplj8Vi1Namcqxrg8RCP636X0c6qFH5PSdCs5LgVRjaO8ZT8A%2BhSBnku9wXNuWLjm4sifC4je%2B9%2FSg9SWF4K4KPU8FX8dABSof1Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0356cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-5.webp
200 OK 1.8 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-5.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
GET /img/comments/person-5.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1846
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yoJqnkpuK5w9YgkRgxwLwOXtdd29T1FbnofLchvx7hutOOzTvaxPyceBrn15f9lQnmU6dlOhlnCZ%2BcYwnWsrF%2Bk71VY56W%2Bi7c8B7qImodGLoHh69GW5hYIzhxUKaZtgjlVz7HY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0656cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-6.webp
200 OK 1.9 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-6.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4
GET /img/comments/person-6.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1854
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FNUzBDjGVcpmJqebSsRz3UlR7cy9xyLUb18%2BYg2G%2BK3FL8ME70y7eMTEI6dvigdAZad%2FdpxWgRQgLTSqz%2Bsyf9ndPA8b8ZGTaMWSlbjBsLzG%2Bcm6lOECV3xTLb35wTPAzD5vPbU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0956cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-8.webp
200 OK 1.8 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-8.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d
GET /img/comments/person-8.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1802
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tUAnwLTEqqcSh%2BMCLYo3UFvlZIvFRES5AJBTz5ebx9bWmKESYDLrkgRU%2FALdlH36d4tvKcBu7m5WLiLNF9FSAcBFjJxUaYXaTyxHuYdPf%2BMY%2BrITktUEGkeXWdsa33%2F6FM73%2B2c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0b56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-9.webp
200 OK 1.7 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-9.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
GET /img/comments/person-9.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1654
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NNX5DQQzENf3hfBnjfd%2BxdoE77mMAu68IpHSVhaSMvo6Qrcxp6QnFef0L61lgg07VvWZ2RJaBfQC7X2gWjuoZuogm2ph2jQwkQARDuRLl%2B%2Bc72IBvpCIaPzagNypPVVXsX4oVfg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0f56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/survey.f8b42bb7.js
200 OK 4.4 kB URL GET HTTP/3 ibekraiysurvey.top/js/survey.f8b42bb7.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (6551), with no line terminators
Hash c56f5e014a5a818f40d9917608f6ebfd
f0242cc81acd82ca395f11bd54b09809fa591778
84284a00428f276b984d1eb4bee31eec7253397036b9caaadeb623c7fbf4824b
GET /js/survey.f8b42bb7.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1997"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mxhoC8Mamcw67niYHSHW3vCgwG8nQhpJ6%2BmhXLF2q06KFx6GdxLSBiU3NB70f%2BrVp%2FXrHm7TNytm0pqGzmchzVCh9Rq5sChvb9A7Mfx5I%2B1EJDs79kTVA%2FLn4lxK5EH9IcxhDmw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9c556cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-10.webp
200 OK 2.2 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-10.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332
GET /img/comments/person-10.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 2222
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VfIfPrB%2B5wF2phXci5cOyVQu0hNxnqiVlRc0ct2ulrDKvv1JwNrraszpbJ7lB%2FKN57Gfc46cfrt5QJO2vTtqesrv2tCg6fGuAxOko%2BdOfF%2BK7PAkvbs8BHr28i5WDk7rr1GMur8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd1056cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/_core-survey.33c8a80d.js
200 OK 41 kB URL GET HTTP/3 ibekraiysurvey.top/js/_core-survey.33c8a80d.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type Unicode text, UTF-8 text, with very long lines (65456)
Hash 4c9cc50235223d97bdb9994574108f1d
1c8f20ecac98b31fb0edac7d4e7ff5090c8ce20f
999da5f5115ec186aea1d15a907181c2afde1861062923e65faebcf6bf4cbc83
GET /js/_core-survey.33c8a80d.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-26481"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gTIyyzKauSkF%2FVVwUTY98RFgQPDwNiIY5NsU9hhBdfMN5ftPCumBUADvMcKQu3M7IC87KyMUj2XEWCgkANRKDgmJMuROjBEXGFij6PMsUT70dSFOO1y34NBLMwpDb%2FM2Cb0EAQg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9c356cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-3.webp
200 OK 982 B URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-3.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
GET /img/comments/person-3.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 982
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sV7UuKa488KZabMvGXXStgyDcdXg%2BgMpGwwY1%2FLeNnZ2zhO%2BdZvArcgrJPuLJskPosD%2F0NO%2FvIhBuhutsHTTgFjhpBIW08Rq5sy7TUu%2BUbMrCOMcPSFoagLWbIG3dTtLO2voFew%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd0d56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/rating.737ee6dd.js
200 OK 3.9 kB URL GET HTTP/3 ibekraiysurvey.top/js/rating.737ee6dd.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type Unicode text, UTF-8 text, with very long lines (7389), with no line terminators
Hash 61d623219d095296875595b4cba20aea
f13dc3511eb44cb6fec5de20f33b5a00200dfff4
2c1eb335b1356ff76194aa2c5df9d7617b137acbdf54453405457261b3fd4230
GET /js/rating.737ee6dd.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-1d17"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3400
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zfCd4qlsAruqtwhEfD30H3s7I1eQj4Lr9t2iFwgvOi45DNV2EmRYawZoMt5RvufQzavDrv%2FdNMjY7vvgrMIyMD%2FiRh1zVl3i9QxJqEFO7ZqmZTauIlpdTOGwfGBv8Sx8flkaJk4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f006bfc56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=ibekraiysurvey.top&var=6235319&ymid=8&var_3=null&var_4=null&dsig=&tg=1&action=prerequest
200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=ibekraiysurvey.top&var=6235319&ymid=8&var_3=null&var_4=null&dsig=&tg=1&action=prerequest
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint4C:A3:DB:F6:1D:A2:D6:78:AD:0C:8D:D6:4F:CC:11:8D:EF:D5:AB:B9
ValiditySat, 26 Aug 2023 05:13:11 GMT - Fri, 24 Nov 2023 05:13:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=6163203&is_mobile=false&domain=ibekraiysurvey.top&var=6235319&ymid=8&var_3=null&var_4=null&dsig=&tg=1&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-length: 0
x-trace-id: ad39b0212e53bd04f6611d36e6d6026b
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ibekraiysurvey.top/img/rain/dollars-1.webp
200 OK 10 kB URL GET HTTP/3 ibekraiysurvey.top/img/rain/dollars-1.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash a5bef813a0113d018592091106451c8b
59365e96c4abca5eb98a0c56db0af0bb5cbffebb
036beb7de9c9d450e1442d593ff70ad392ca4be6754e7feaec249c0009e1bd83
GET /img/rain/dollars-1.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ibekraiysurvey.top/css/survey.13f714f9.css
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 10546
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-2932"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dJUoO%2BFAgU8NqWMrGL2fZmKJS75cdDybWEcSIWvZ1Xvvy47jR%2FhcCUyd88RLzJgBWEOWv4DEYdq1D99h1Bot0Z%2FspK4hxb1cqthPWQLcjNS1zJBmUAZB%2BuQyR552x3mdEQRD%2FEc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01dd3156cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/rain/dollars-2.webp
200 OK 8.1 kB URL GET HTTP/3 ibekraiysurvey.top/img/rain/dollars-2.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8b4203d496c3f52b116af082a0cd4017
de5369e9459e240950bb7eb5261eaac1db26907f
8dd1f04088c25e20d15e1bc23129604830aab2b4d3d0a408a5f047f9768f39a4
GET /img/rain/dollars-2.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ibekraiysurvey.top/css/survey.13f714f9.css
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 8140
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-1fcc"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s7zfDHkRFoDn7%2Fwo%2B059dVWhC41OwNPP8v9jBzCFxiPD5vlakyMAyFL4VAvoY1j%2BgeogFmfvvSFo7Qw9Fj9iADr1nuWTF7mDyLQoF%2BCFPCv7%2BKZaPH2eFFsI8r%2FRugj5lTGaAWo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01dd3656cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/rain/dollars-3.webp
200 OK 5.9 kB URL GET HTTP/3 ibekraiysurvey.top/img/rain/dollars-3.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 51ea76ff382bff8ef58a9943f7fd21d1
5c3d6ad6620fbde5ce3dddc88604e6d54621eba2
0240f30fc542fb5c2d532f33bc793b797199adaea75e22a7d9f04674b80d9a32
GET /img/rain/dollars-3.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ibekraiysurvey.top/css/survey.13f714f9.css
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 5938
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-1732"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wmcXJGaPOKtdCpxY32y4VvZxhzxNoMt1sk%2FMZQu09HKgWLrbBXhQKwt2s1vGF%2F%2BMve40Df9vHuCJaxXq8HGOPzQW9lS9W8SvATJIivalsh5IPdT%2Fi%2BO%2FCLZsA%2BZ3OO%2FyC47hKA0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01dd3756cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-attributes-to-props.js.2fd8866e.js
200 OK 2.3 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-attributes-to-props.js.2fd8866e.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (702), with no line terminators
Hash 53ae10d99fc989986a7d30427701ba02
f2b311e46d3b0954e7b8f7ad72013124ecd9f963
fbdf8678cc63d96ed164a95f06bdf2b75af9fb709441dc03d143f18b0e92f8e8
GET /js/v-attributes-to-props.js.2fd8866e.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-2be"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8zqRjO2dJBe9CS%2BJN9NpV7upsZ01%2B%2FzZL2Qe%2BOgCK863MnoNcjdi07R8BlcmW%2FD8P1Crt1VP8KId7KAp1V6Zp7yeBkergFsdbwgnNRZejzOkrDX2VqXrB%2FWJa1Hj8aB%2BSfVCar8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effcb6d56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 684
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 4ded3f5654ab50f726532bd587729ba8
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibekraiysurvey.top/js/s-storageService.js.28f605b4.js
200 OK 981 B URL GET HTTP/3 ibekraiysurvey.top/js/s-storageService.js.28f605b4.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (2624), with no line terminators
Hash 45d18c40a4eb4014e490ac189aeb83ab
8a47894cce0d571c31809439a0b5ef01dd5422da
8a5fb86bfd332af56a2aa8778265fa87db6bf9f343ea2ced8617cf244af4bed4
GET /js/s-storageService.js.28f605b4.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-a40"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3hchN%2BLZJQnqKTcj7bkxMIXTb%2FKXkkOcOG471PyeOB%2BcOdrS5a3GxexTFAqghUytf6k5S15Cdi9p1ICwNTI2Ti5O0C%2F1TLmf9N6xOSZxjT%2Buc1Mh2ZcjX4HCypWn4ATfe%2BaaoP8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9ae56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/icon/finance/woman.webp
200 OK 2.4 kB URL GET HTTP/3 ibekraiysurvey.top/img/icon/finance/woman.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash 590fd4a60be002011c4d09a32b3dee9e
45dbb90f6edd9dd9b777e5b3fc98b82ca18eaaf2
12f0bfe3db63dff3314b64cb12871681258a87bfcec40db1bc7712d4a32620e7
GET /img/icon/finance/woman.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 2356
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-934"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RT%2FWcgJ%2BX60o7cHn2E4NhAMSKSG9jjqmmCRU3wLpsXRZDFCaiKlQFuJ%2FLkEx%2BhIgmAyLnY%2F4c1skhy9WkOcdy31hs0Yzo%2FQUW%2B6uoOhTkG%2FBoKf5atOVgzFr95Q0CQ98f7rPV5k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f020d6056cc-OSL
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-do
200 OK 0 B IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-length: 0
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-do
200 OK 179 B IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 9a7b9aabffc07cb4cd396e227e3b6201
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1449
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 90268a602f016df1766650129b40624c
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibekraiysurvey.top/js/_each-land-config.d76fde33.js
200 OK 17 kB URL GET HTTP/3 ibekraiysurvey.top/js/_each-land-config.d76fde33.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (60060)
Hash 9da2d82e09e2c1e2a20bd8641930dcfe
62930af9f95c29c4a55096f49969ab5d51cc3047
a762b96d844379b2b9b9a365408d0dc56207d169888fba2e946ec4d8352e9db8
GET /js/_each-land-config.d76fde33.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-eaf0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4BDtx2O0zrr2Ponu5eODgI1rtjxFrkj5spJNonwDJl0%2FqPqVppRLfQ5MW1hOLTjKwH4PW8WRa0cai2JfApED9cs2cIlT1xfOa8PY0r5Wf%2FYMRgjCtL2qhK9XM8Ehz1v6VvRNcYY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9be56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
offpichuan.com/track?offer_id=9540&z=6235319&request_var=8&variable2=3tgjo34sp4bv&uid=wwipjrudiagc4r5stw3iciqop49bkd2u
200 OK 166 B URL GET HTTP/2 offpichuan.com/track?offer_id=9540&z=6235319&request_var=8&variable2=3tgjo34sp4bv&uid=wwipjrudiagc4r5stw3iciqop49bkd2u
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash c733fa1b70bf1ffd2b32fcd261f1eef7
521d70f839a801f871819eb853f4274de71d7d19
3c1d918cfed344e9abd3561b4e942ba9f8aefb29917559748cb9552f3c07d8a8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /track?offer_id=9540&z=6235319&request_var=8&variable2=3tgjo34sp4bv&uid=wwipjrudiagc4r5stw3iciqop49bkd2u HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json
content-length: 166
x-trace-id: a0475c1f61d58a0de1f75b63005e950b
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 762489f21e64159610410f6912dae74b
486de8848e389dfea01157fb9dc03f270d665e27
18b5806e63a3b9836ec6007ba5d377aa1235f849c609207987c26b02bd4b9ed5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 20:04:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
offpichuan.com/rotate?zz=4292526;4326645;5128285;4949467;5381239;5381316;5381339;5381332;5381307&var=6235319&ymid=8&uid=wwipjrudiagc4r5stw3iciqop49bkd2u
200 OK 192 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292526;4326645;5128285;4949467;5381239;5381316;5381339;5381332;5381307&var=6235319&ymid=8&uid=wwipjrudiagc4r5stw3iciqop49bkd2u
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type JSON data\012- , ASCII text, with very long lines (3979)
Size 192 kB (191593 bytes)
Hash ce06de5d915985188068089b247c66cc
de440680a61b428ed403df422d0e8f5c7b919bbe
9c46e23661c17ddffb65545c23fa21f24a524f174e916725cee73fe635384fbb
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?zz=4292526;4326645;5128285;4949467;5381239;5381316;5381339;5381332;5381307&var=6235319&ymid=8&uid=wwipjrudiagc4r5stw3iciqop49bkd2u HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/javascript
x-trace-id: 27d1e9c8bce00d0c96fb8c2575bc0042
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://ibekraiysurvey.top
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 762489f21e64159610410f6912dae74b
486de8848e389dfea01157fb9dc03f270d665e27
18b5806e63a3b9836ec6007ba5d377aa1235f849c609207987c26b02bd4b9ed5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 20:04:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
471 B IP
Hash e9588e7d08a117ae1946619a975fe0ea
1e8a5b0320a69bd4cbbadc59fb043118bb147a19
bb6cb9f5ab1ca15aa181c254f99efd0bf9966997317e1a759309cc1eaa7ef440
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Oct 2023 20:04:29 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 26 Oct 2023 05:19:50 GMT
Expires: Thu, 02 Nov 2023 05:19:49 GMT
Etag: "1e8a5b0320a69bd4cbbadc59fb043118bb147a19"
Cache-Control: max-age=552617,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 81c54f065ac01c06-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1455
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 26 Oct 2023 20:04:29 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://ibekraiysurvey.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dortmark.net/sync-metrics
200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 730
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:30 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 25c83be51529363fbe20bbadfe65688c
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibekraiysurvey.top/js/config/sd/sd-9540-en.js?v=10
200 OK 8.2 kB URL GET HTTP/3 ibekraiysurvey.top/js/config/sd/sd-9540-en.js?v=10
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type Unicode text, UTF-8 text, with very long lines (8579), with no line terminators
Hash 2af1738ddb70053016827118b13e4421
54c9c47ab71d46623ca8c8690f935315bc4dfee7
7eaa9e4b8d36e964d67dc4f42cbd5de770515f844ed50f9ded88adb09a69f002
GET /js/config/sd/sd-9540-en.js?v=10 HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1ff3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QyON8IgZaFZCt6%2BzPEySCG%2BD%2BVsFANOqnvXxuFn5lawb%2FrEZiYmtqy5F1YphUCGCgELLjxggjxpnpI5kcX1SO3QZLOzW7U2ZC31c97nwJYEVrKtbAnh3U35sTBRQiTl29MtbUIQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efecaa256cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/config/comments/en.json
200 OK 4.5 kB URL GET HTTP/3 ibekraiysurvey.top/js/config/comments/en.json
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type Unicode text, UTF-8 text, with very long lines (5173), with no line terminators
Hash 50680109e350a76b2bb8131cdaeb735e
0c14dde15f13c0deefd1ff3eb8c4608e73d133b6
a9ebf6b7ceb48bd6c63b99320183934f2b183af64cc7f27fd85ebe7191d92e42
GET /js/config/comments/en.json HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/json
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=B7nzVTsdsI5N51CUSIXIiWsCYDiXEomoVEOZ80dDwqz1MhGswjEa%2FViR9K7riVemDPs%2Bz%2Be17sUezmRkMPWuH0NG2b8oS3l2cvRGilxJqkoxouh77lPqqXs0Y1QT5yEc6qUnF5c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effbb6056cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/icon-survey.svg
200 OK 2.7 kB URL GET HTTP/3 ibekraiysurvey.top/img/icon-survey.svg
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2690), with no line terminators
Hash a000ba4d0e7570d810feafb22bc50bef
af8fce44a683d3dfebe69cbe856e747739c9a666
9ae848c180201d8ae5c59ce118b0b7ef395a01295fb04d57e81cfe0566100679
GET /img/icon-survey.svg HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: image/svg+xml
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3672
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CQZLTm0IG29tDwB9L0pHKS8EVhyMNXc9fBEHaUvndUe6qPtw8MAhOD%2FfQuwC6EoNNgceo0zYJTTMX2YmeWJhSqPnT%2BTiwPKFFI9I%2B4PnQmTvHo8yBQJPPwaxoXDMQc7rwpTaLqA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efe09cd56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-utilities.js.87af613f.js
200 OK 2.6 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-utilities.js.87af613f.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (2645), with no line terminators
Hash abec403b7b33ca38aeea0fc4d0d70a9a
b608145aafcaffd8b4ac15e7f994dec8983be254
8c10a114c0d664a927f5358ddb3eca9d886ca1cf535a69d9313b7ddd8d2d861b
GET /js/v-utilities.js.87af613f.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-a11"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zuGsW0Jd6HwlxoYdiV%2BF2uN2SrH1T3jewPF206sNSNYpQkpSSGzJDd9mfruGgfRuzk4t9lrYR%2BpeyvGNizFQx1hQElTMXIHBafTUW8dXXFtWWEkpo%2FupBfMU0LmlR%2BMvxdgy33k%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effcb6756cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-11.webp
200 OK 1.5 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-11.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
GET /img/comments/person-11.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1526
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yQfo2i18thisOAQhNBhH92k%2F1WlmtNoI4powccNcaj9SJoIIcav%2BlCzDISRCMtDRLMqRwf0U4qAYn9tQluznXQOIt714Uv7%2BpaQi%2F4udJs5DgdddfSEEvPoiOz396SqRUkeS4sY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd1156cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-possibleStandardNamesOptimized.js.a40daacf.js
200 OK 7.6 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-possibleStandardNamesOptimized.js.a40daacf.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (7923), with no line terminators
Hash c85d72c54bde00b89ae995fc05fdbbc5
c5b2353ae98c2b6e3e13903b0a933cd5a05eba4d
f213c99b5a413aa0e270758702396247b2346dea050d2d641b59619743af6bca
GET /js/v-possibleStandardNamesOptimized.js.a40daacf.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1d99"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cFietIjHnElaguAJovslIbjNPewmUKOBXRz3Qq8Gp6bIHqYdcPMNW4xSOB7BNhDr5tL1lZOJVs4rGiiYJ1%2BSPzjZi9nKxa4UV1MBIuH6t89Nrr6P93thCwHtv5guyBmu9Vph4S0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effcb6556cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-html-to-dom.js.25ac923b.js
200 OK 364 B URL GET HTTP/3 ibekraiysurvey.top/js/v-html-to-dom.js.25ac923b.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (373), with no line terminators
Hash a7f2bfff6008437c4c59c01a8a5b1b38
278cc87f18765ab54a16067a01c72ac7cef19a57
fad66ea60179976931a5231b7d9dfb5955eaa1ad3c110be1e93068868c62c865
GET /js/v-html-to-dom.js.25ac923b.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-16c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ha8KrQ4wf1a1fZFNp6d9Uqs7eTPnU7ri9Swsg2jT7cKMV6GK6vXal0A8vB71r9l9t%2BA9r86Q5n4TJtS03kCoOt5Y30vPNhBrK29fKf%2FKtYEpHpxynlCgMR%2FIhIVbCGH79xt5mJE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effdb7856cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/comments/person-13.webp
200 OK 1.9 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-13.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ad1e0d431ec5fcb9a1e7ba8680d14a21
0f30fc9c7a5460458fb1e01acff03df4d5809950
45f8553b96fbe562a88e1366e8986d14b4d51f7d069604f8d29675844a19b204
GET /img/comments/person-13.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1888
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-760"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Cgdzmgyd6haE7NDY8fFi2uZamAMs9X%2Fu%2F%2BMycFUoYUpCJT7zxBOkKnSr6r1eIPe%2BCpwM8tbWt9tM27BkR8vwouiiwo56z9fdFkm%2BaGFJHVdRQOLDIAFl7sf%2BD%2FfOwYNyfu7Q1i8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd1356cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-index.js.0fa1829c.js
200 OK 41 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-index.js.0fa1829c.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (40921)
Hash 85d1bcb76d33d00e7280659a79ad97eb
e708d6d94617d9d20970f234811a77dd597e3f3c
0f5f3e84792501d1f90f397c4f412144be23f76695ff1eb927d6824b62a84fb7
GET /js/v-index.js.0fa1829c.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-a026"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6im0QxBF1qusdtPXqdyRNgN4chrBGS%2FBHy6J3slWV77aiHGZ5PsYD%2FF4%2BVK6HsCbDNPqpGLgkaiGKIxsLM88l3wYy2Moj%2BFCVL4yOpRLMMBxpWIwyVmfPTrVM%2BmDNZpRew5wiOo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efde9ad56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=6235319&var_3=null&var_4=null&ymid=8&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
200 OK 27 kB URL GET HTTP/3 ibekraiysurvey.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=6235319&var_3=null&var_4=null&ymid=8&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (26953), with no line terminators
Hash 7cfed967ba7094f80855e9c7850f359e
f0acba47cbaae0bf415996d43fdde90f109f1cff
8f13eabfe1290926119e6421d35719e33ef68384b295eaee367923d75de2dc17
GET /pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=6235319&var_3=null&var_4=null&ymid=8&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-6949"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jyShdYWaoYNB%2Bmukfse%2FkaxT3pUG0uxZh0atWCLW0oevu6uBWz4pxNvAukltL9jN3FX0JvF3azbE9n1zbyU5jqVIIP9rib2Z6NPVjtnI%2FcBLm6aVMt1s94AAitME8WoqXIL%2FNc4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effbb5a56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint3D:4A:6B:FD:30:97:01:E9:C1:38:5F:67:2B:A6:A3:43:7B:2E:72:45
ValidityThu, 28 Sep 2023 05:32:37 GMT - Thu, 21 Dec 2023 05:32:36 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 9cd0d8a0d4b4590be9be14fd3a0a4d93
c7b33101b23515f6ce4cf6fba5a9cfe36637454f
4eab24765a52a664cb6659cc7a688a056e58544bb670983943b62e033aa9bbc0
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 26 Oct 2023 20:04:28 GMT
date: Thu, 26 Oct 2023 20:04:28 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ibekraiysurvey.top/img/comments/person-12.webp
200 OK 1.4 kB URL GET HTTP/3 ibekraiysurvey.top/img/comments/person-12.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e
GET /img/comments/person-12.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 1390
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jeSAFW4miVZoS6ktcaMwfbOtibnznnsygaBPGp3HaMFgoO91oTpSJ7uPhkDuRMgKDD1AQd5hF%2B9zzHtJQeOPOTfuQ7Bp6AXaqGuN89aWX4Nc0%2Bw8%2Fzxr0kxmqCCC7TKDjW8EJGc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01bd1256cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-constants.js.f034611f.js
200 OK 600 B URL GET HTTP/3 ibekraiysurvey.top/js/v-constants.js.f034611f.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (664), with no line terminators
Hash 27f01e0b6abd3118dbe14c1352820bde
c6bb9ff7f0197e356b17b7474b91e77652d7c33d
0e43dafcd66760252449c0a5abac7ec8a7a225edc68783f071db65152b3abe4c
GET /js/v-constants.js.f034611f.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-258"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J6N70ba3PBZwFHbGbhoHpjYmYTtrEqdePyDLqqHALa5iIz%2BYOYY65lZyRuC38KxmWU%2BzSZC7lo2sBkwnw3v0BG1Ln%2F3OepETrAjvErhs%2Bevs3sKhUNV9nzknsYxLDMuEja5XoM0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effdb7956cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-dom-to-react.js.428d2e15.js
200 OK 1.1 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-dom-to-react.js.428d2e15.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (1101), with no line terminators
Hash 6026bb5401d27988f3bdcfee3fba2043
05621f7aa4b9592a6b5a6ffa19b27259c5eb0fe6
7c64d40941a9f40204e8986edeb8b37d30be6b4ee193cd51c6d7d5fbe7530eba
GET /js/v-dom-to-react.js.428d2e15.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-43d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlRuS4T1R6XLTwAs4C6Y%2Bacl6nm1LzmBOOLIN4UHasSpF2EN2HK8unjqSX7zPq6kLzZXhxfC63K%2FTt4v7%2BTph2kRVfYA7pRVQnnsFaZrF6fvRHoj077mYN2Ey9ntVcwq1ZCVVGo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effcb6b56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/_rtc.b4bcc48a.js
200 OK 12 kB URL GET HTTP/3 ibekraiysurvey.top/js/_rtc.b4bcc48a.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (12222), with no line terminators
Hash 7885f3d91fd70b56a231976011a31146
7214d3f5273b6f1f0bc8fddd5e8ea906f614e9df
880bcf01f8cf339662db0112b916738048ebb4c2e9133bc8973c820cd937e0e9
GET /js/_rtc.b4bcc48a.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-2fbe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pMNXTwDzOhMq2km%2FzyIkW1BNz%2FawfMswjc7iHyH%2BGZCZzlpI7MJsR0cdtxTFZjB1vnHGifDZftmzMc4RYrh4QLNrF%2Bxaf9YV5Tn9URt6QTuuo2MxyqBpvpETQrcmHbUvCjZGnzI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efde9ab56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/css/survey.13f714f9.css
200 OK 68 kB URL GET HTTP/3 ibekraiysurvey.top/css/survey.13f714f9.css
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (36509)
Hash fb288f4a338ab73c054c26d5adb8969b
f32694ea126f4a2e73170b17dc52d65e9f4771fd
c59ea5c03af8d0c0a5a7f4da06482461271ad43cbd6d63faf0e323e535ffe40e
GET /css/survey.13f714f9.css HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: text/css
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-10ba8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QOz5xjfi%2FY%2B4ETMq%2Fr3xPy%2B2lXnYL5i9riJdFFH%2BU7Cqla30HCXZ4qejozrTqmVtxrL6ZzZHv8nhw3xaHXrEXwSrk%2FRheSZqJSyniiSRi%2Baxs7Qj6i5Vy8By6cW%2B0FQ%2BUSnYqH8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9c856cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-index.mjs.f94704a2.js
200 OK 35 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-index.mjs.f94704a2.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (35287), with no line terminators
Hash 90fddde810a555d793ce11a8300c1ccf
b3e43913b63c72998e988e7b7392e2125492191f
0063db5a9711ca0a23f234294c720ff15cc7705b382b530dc09b7e2e9c8a3430
GET /js/v-index.mjs.f94704a2.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-89d7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kuzrvqNn1VIwlOJPL%2BjROf84hcG7sa%2BHpvMaSYGhGPge%2FAg85K3EFu5uJ8VjaMrm3XNgIuSr%2F07t3IvFplHQO3V4ti%2FFFjh2k%2FoFfuq5Zmu2Q3ivSHpOYSMaYvpvK8fYPPWCO5o%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effbb6156cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
200 OK 7.2 kB URL User Request GET HTTP/2 ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
IP
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7475), with no line terminators
Hash 4d50a77c28b294f9a5c6fdf7df096123
93ffdb23fbf1c4b78ac5ec4fa11842a12a8a5cc9
aabf9509e32d47aa19c78148c57712188cf02c11369a098b4394b057c36a1555
GET /finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: text/html
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FZfmfDlJtw%2FSlADm9V0Laq7Gp%2F5BR31oKlmXv4%2FtmHiHIWz80wFrFThRfYFwmeN3sPV54BpjvtnSR%2B4x05iO%2BECDJtqi%2FZgKHZ9d6evomhz%2B5%2Bm3wy1HVDBPQUpKZlquyiLKkLo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efbb84656a8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ibekraiysurvey.top/5/6207682/?abt_opts=1&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=&domain_onclick=https%3A%2F%2Fibekraiysurvey.top
200 OK 2.8 kB URL GET HTTP/3 ibekraiysurvey.top/5/6207682/?abt_opts=1&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=&domain_onclick=https%3A%2F%2Fibekraiysurvey.top
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3013), with no line terminators
Hash c01813ce760f1cc522251cc7cf532211
d0ca217c0b4c57cdb492b07af45528415bd3fc62
764aa61bdbe063a1551c6ed05e3d37ba3dd59e70ad893486be7a3ba777ebc174
GET /5/6207682/?abt_opts=1&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=&domain_onclick=https%3A%2F%2Fibekraiysurvey.top HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 6391112f18477f2031671e2bb8077fca
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; expires=Fri, 25 Oct 2024 20:04:28 GMT; path=/; secure; SameSite=None
oaidts=1698350668; expires=Fri, 25 Oct 2024 20:04:28 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OQ9NVdaS0MPnRAZpumsIsN9AlhWdFCtw5AjAUTo63oulRm%2BeYIPRW11H28FSZm6u6AYTUTKkbq08jspIUhofnhgc5TO2Mm9UN7C6oYjsa5ebQjEh%2Bpf8fORo3BfdWYs7fmqWiwI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f006bfb56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/favicon.ico
200 OK 1.2 kB URL GET HTTP/3 ibekraiysurvey.top/favicon.ico
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; oaidts=1698350669; prefetchAd_6207682=true; ID=wwipjrudiagc4r5stw3iciqop49bkd2u; syncedCookie=true; prefetchAd_4292574=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/x-icon
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=waZGrxdMVYkKQU1unnPu8HXM6RWI4VEKotR6gtTqS62ireh1NCvRTT23w8VGg8sVXB6y%2F%2FgyWSWHwSnVwarYKyY%2FhSRiEZJDhgcIutN3DWF1G73IJ2H9CJ4Aj%2BrR4SNnczrau%2B4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f05789456cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
200 OK 473 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (689)
Size 473 kB (472856 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Oct 2023 20:04:17 GMT
expires: Fri, 25 Oct 2024 20:04:17 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 12
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ibekraiysurvey.top/js/SurveyContainer.9c23aba3.js
200 OK 53 kB URL GET HTTP/3 ibekraiysurvey.top/js/SurveyContainer.9c23aba3.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (52849)
Hash 8fb74ca17e61d5652c078260fbf1dc0a
3a8048d466019797f0b305c72892a3193ebc2a2f
320ee5344bc5fdc64be05ede19a85698cf31f5009473d2f600ae1cc3b5eee601
GET /js/SurveyContainer.9c23aba3.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-cec3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uS5T2dB%2Fh4iOBJnTIiUnki8SpDBjXAwDcuxb7UcElp9s2Xu9zSz370TG2hDekGSgmREkSKRD6r0XVecrnb0I5Kyd6Rjb68Obad1YcQX4%2F4vcBlzJ9J1VVSmUd8uSCQqKkzWrr9w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effdb7b56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/img/icon/finance/man.webp
200 OK 590 B URL GET HTTP/3 ibekraiysurvey.top/img/icon/finance/man.webp
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type RIFF (little-endian) data, Web/P image\012- data
Hash d729db2f101fe611a5a74cec2fa7a7d7
5a13312a8723c57605804f07f064b5f233ea9595
929f7c5d50d2bea65039de8cf572e24c1957209c92b983eebe4c322a93ccfe87
GET /img/icon/finance/man.webp HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: image/webp
content-length: 590
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-24e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UdaKlgRTB1dSvareqaMDcqPaPqR8JQeIlHVidaHkkIZXzQywHwCscWoPOOe0l7trkBODwieV6gzIsf4vZD%2BASdeL1nCKzFuDkBJc0kvA%2FYVLb94HPQTH5LX6EN1YAXCqH7AmvKY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f01fd5256cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/_prefetcher.be7b27ba.js
200 OK 2.3 kB URL GET HTTP/3 ibekraiysurvey.top/js/_prefetcher.be7b27ba.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (2407), with no line terminators
Hash ff29b450f26b26525e4f7b71e61917f9
4302649f9b4333871d9c920c539cfc81f5d00fb4
276f4cde911d0c6c7d1a7a6e23a6aad73632e6eed2c48b3329cf1ce7694c6d8c
GET /js/_prefetcher.be7b27ba.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-929"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vRiitjQaRWkABI4DenItZ4ZenK1J6B3aqCSjonyvLMCaLZplS0mGssnCFaUWCz8%2BLrvJV6jk750XU0DDiEy6n6YegDiQLQN7mbmUQhz3tIAmcuK3sgvLUP4BotaN%2BrlDZRIHINA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efde9a656cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/css/_core-survey.626be79c.css
200 OK 130 B URL GET HTTP/3 ibekraiysurvey.top/css/_core-survey.626be79c.css
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with no line terminators
Hash a55f9fbe2337d1c538f9f25b1b29c8f4
23e6ec134ac3f27176afa02ccaf9302a654955db
43e1b300d47475ea5462282492809a844cc67d8ca60d84f0c4d98a3783d96bc2
GET /css/_core-survey.626be79c.css HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: text/css
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-82"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KZqFzYJyJt%2BAKSwzKo9HTmZYC1fTLYyMC12bgtiV87%2F7fAdlHdZ7dE1xLVRhfssKyxICpgslswE8wj3haB7AgDtSlS7hHtW0aKVoHsF7sMbGWOOMtuwnsrx6%2BPssAXoLAfr34S8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9c756cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/config/dict/cookie-consent-1.json?v=10
200 OK 6.8 kB URL GET HTTP/3 ibekraiysurvey.top/js/config/dict/cookie-consent-1.json?v=10
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/json
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=h%2BPO20FOtAgMr7fx9LvK3XcsSQVke%2B%2BWcptA711DjZ3UokQZ7zYSk%2Fk5zFY%2FosR4VcmmrxQTwW1TCWByozksG%2B8UJwSnlxDn3MQ%2B9fOSpf460PMbYqE3BY5KCX8WfiAoTCP73gE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54eff7b2f56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/rhd?rb=AY65RMc8n5lkiPoruiHfnKKsb_SB9BktXRZ9juC9lScNv2338iK_3PgNfU-8QC32inRNDGK6XJ14X_joFwGV19LCG2QEIs099Ox7mv9YTU0r8yQXtHGlwF58wgceB_rilkUnw2ARqF3FIVMIedBYIv8q3s8SHn4MqdqSMZj7f_sSDcqZJYf7i7JSpWvusJCJnOCVi-AEIJg%3D&request_ab2=0&var_3=&var_4=&zoneid=6207682&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fibekraiysurvey.top%2Ffinance-survey.html%3Fz%3D6235319%26offer_id%3D9540%26var%3D8%26ymid%3D3tgjo34sp4bv%26utm_campaign%3D8%26utm_medium%3D6235319%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=&domain_onclick=https%3A%2F%2Fibekraiysurvey.top&m=link
200 OK 1.9 kB URL GET HTTP/3 ibekraiysurvey.top/rhd?rb=AY65RMc8n5lkiPoruiHfnKKsb_SB9BktXRZ9juC9lScNv2338iK_3PgNfU-8QC32inRNDGK6XJ14X_joFwGV19LCG2QEIs099Ox7mv9YTU0r8yQXtHGlwF58wgceB_rilkUnw2ARqF3FIVMIedBYIv8q3s8SHn4MqdqSMZj7f_sSDcqZJYf7i7JSpWvusJCJnOCVi-AEIJg%3D&request_ab2=0&var_3=&var_4=&zoneid=6207682&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fibekraiysurvey.top%2Ffinance-survey.html%3Fz%3D6235319%26offer_id%3D9540%26var%3D8%26ymid%3D3tgjo34sp4bv%26utm_campaign%3D8%26utm_medium%3D6235319%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=&domain_onclick=https%3A%2F%2Fibekraiysurvey.top&m=link
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1874), with no line terminators
Hash 9b820ff42afa0d12a78c4e80c8c865ed
62335ca4108a58e2ba962ea8c1fc24ba84d35431
1af83426a637fc82403ed684e358dd523c25794f05125a48a1831ac6a0d320df
GET /rhd?rb=AY65RMc8n5lkiPoruiHfnKKsb_SB9BktXRZ9juC9lScNv2338iK_3PgNfU-8QC32inRNDGK6XJ14X_joFwGV19LCG2QEIs099Ox7mv9YTU0r8yQXtHGlwF58wgceB_rilkUnw2ARqF3FIVMIedBYIv8q3s8SHn4MqdqSMZj7f_sSDcqZJYf7i7JSpWvusJCJnOCVi-AEIJg%3D&request_ab2=0&var_3=&var_4=&zoneid=6207682&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fibekraiysurvey.top%2Ffinance-survey.html%3Fz%3D6235319%26offer_id%3D9540%26var%3D8%26ymid%3D3tgjo34sp4bv%26utm_campaign%3D8%26utm_medium%3D6235319%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=&domain_onclick=https%3A%2F%2Fibekraiysurvey.top&m=link HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: c2e09f92ecc7c74e4f179d68f7c047fb
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
oaidts=1698350668; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k%2Fhm4lozmexxdXl9de4UUV0TnWjLm18X5Q2i7uxHZhR2Bt35kZ5xL%2B2dFJc9fLpqrUNqKrZQbwk4nvJOF7up145hzqqLxyfO7wbMKMx8fcfO9qDvogLS1WRdNSgKwe7Q1BtpMQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f022d7756cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/5/4292574/?abt_opts=1&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=wwipjrudiagc4r5stw3iciqop49bkd2u&domain_onclick=https%3A%2F%2Fibekraiysurvey.top
200 OK 2.8 kB URL GET HTTP/3 ibekraiysurvey.top/5/4292574/?abt_opts=1&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=wwipjrudiagc4r5stw3iciqop49bkd2u&domain_onclick=https%3A%2F%2Fibekraiysurvey.top
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3013), with no line terminators
Hash 31b3f9d63a7b8f949576a2ef45fc9e54
0a6ea5bf3086093e3b1447d903076bdd00248ddc
edb9994b32b600e8421e620f6a8ab4793de99e9a751caea30fd2e4981516473d
GET /5/4292574/?abt_opts=1&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=wwipjrudiagc4r5stw3iciqop49bkd2u&domain_onclick=https%3A%2F%2Fibekraiysurvey.top HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=618bf1b1b1474422baf6c6c117b9018c; oaidts=1698350668; prefetchAd_6207682=true; ID=wwipjrudiagc4r5stw3iciqop49bkd2u
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: cc7945aa26dac008a85fa7fe4b56c381
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
oaidts=1698350669; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Nov 2023 20:04:29 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xTbfdBqto2n3Em9ygWmuB7l2%2FJkdY73V64AV4iNqzAFBmRGRb0bcAFbNw4yo11YqLLyND52E5yPePvD77PKaSyjHBakCNztUVPKqLr2xEXdg89q%2FNicV3j6KY1I9kdgTtQvSTkQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f037eaf56cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/scripts/prefetcher.js
200 OK 11 kB URL GET HTTP/3 ibekraiysurvey.top/scripts/prefetcher.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (10761), with no line terminators
Hash b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
GET /scripts/prefetcher.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-2a09"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vT%2B5%2Fobu0pqWWG4qrLiiAPbbL4gQZg2uXeqHINmQDht5HrUPk9ZGsleKq2iP2wXVkPkr6ZndX2F8TlbU0hgcXEmCO%2B9yTDDWk6ucCdPAJPNJ4zqp21%2FLfSC4Kyk6v%2F3yJ69K5lw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efeaa7f56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/sw/sw6163203.js?var=6235319&var_3=null&var_4=null&ymid=8&ab2_ttl=5184000000
200 OK 1.3 kB URL GET HTTP/3 ibekraiysurvey.top/sw/sw6163203.js?var=6235319&var_3=null&var_4=null&ymid=8&ab2_ttl=5184000000
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (1381), with no line terminators
Hash 849a6c66f58cb89bf2ff6062f565e221
bf062cc02843667564e3b1ac1d13deb9c5206311
5779075245c78b9848a240be3ee8d4ea5aaca38e1642cd6a6af896e58663ba47
GET /sw/sw6163203.js?var=6235319&var_3=null&var_4=null&ymid=8&ab2_ttl=5184000000 HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; oaidts=1698350669; prefetchAd_6207682=true; ID=wwipjrudiagc4r5stw3iciqop49bkd2u; syncedCookie=true; prefetchAd_4292574=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:30 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ya35Sio3ZNp9r96Wz%2BbHZhKRNodolnONBziCjv%2F5YjZHSXtb5NHwjdglUyu3C2knMdw0A7y%2FG3wbwc6FytNaoqLnOKs6efoz6ScvZ5RuF9MgQNiyYt%2Fb4hQ7Fo8jK0mMWmUyc4w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f075a2056cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/rhd?rb=PJeRosHkTXIMmjJtEPz4dB-Vc6MMYfvLLV3M0IomZyVh_00pT9iU7Cygog7m9yMxSoRt1rvqgQ-Zev0Ed6J6bQlwlYcduZ3Fms82Kvwu4xWq3kQVYDTxsaEtV3tf3YJ4IM-X8lrUv7no4_TSIDMGCA5hbeJZ4zVQFzUff50b6yOfLRc68T0VQxCdsf9k1700iTS3lFnWevE%3D&request_ab2=0&var_3=&var_4=&zoneid=4292574&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fibekraiysurvey.top%2Ffinance-survey.html%3Fz%3D6235319%26offer_id%3D9540%26var%3D8%26ymid%3D3tgjo34sp4bv%26utm_campaign%3D8%26utm_medium%3D6235319%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=wwipjrudiagc4r5stw3iciqop49bkd2u&domain_onclick=https%3A%2F%2Fibekraiysurvey.top&m=link
200 OK 1.8 kB URL GET HTTP/3 ibekraiysurvey.top/rhd?rb=PJeRosHkTXIMmjJtEPz4dB-Vc6MMYfvLLV3M0IomZyVh_00pT9iU7Cygog7m9yMxSoRt1rvqgQ-Zev0Ed6J6bQlwlYcduZ3Fms82Kvwu4xWq3kQVYDTxsaEtV3tf3YJ4IM-X8lrUv7no4_TSIDMGCA5hbeJZ4zVQFzUff50b6yOfLRc68T0VQxCdsf9k1700iTS3lFnWevE%3D&request_ab2=0&var_3=&var_4=&zoneid=4292574&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fibekraiysurvey.top%2Ffinance-survey.html%3Fz%3D6235319%26offer_id%3D9540%26var%3D8%26ymid%3D3tgjo34sp4bv%26utm_campaign%3D8%26utm_medium%3D6235319%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=wwipjrudiagc4r5stw3iciqop49bkd2u&domain_onclick=https%3A%2F%2Fibekraiysurvey.top&m=link
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1868), with no line terminators
Hash 7de7d77df9927be198b4c2bfeec70527
705160de53eff13705c4426375141a164045f3e8
df4a51db53fef751547e99c6c219e162bd2085d1daeba23e75b963f9af67affc
GET /rhd?rb=PJeRosHkTXIMmjJtEPz4dB-Vc6MMYfvLLV3M0IomZyVh_00pT9iU7Cygog7m9yMxSoRt1rvqgQ-Zev0Ed6J6bQlwlYcduZ3Fms82Kvwu4xWq3kQVYDTxsaEtV3tf3YJ4IM-X8lrUv7no4_TSIDMGCA5hbeJZ4zVQFzUff50b6yOfLRc68T0VQxCdsf9k1700iTS3lFnWevE%3D&request_ab2=0&var_3=&var_4=&zoneid=4292574&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fibekraiysurvey.top%2Ffinance-survey.html%3Fz%3D6235319%26offer_id%3D9540%26var%3D8%26ymid%3D3tgjo34sp4bv%26utm_campaign%3D8%26utm_medium%3D6235319%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=6235319&var_3=&var_4=&ymid=8&s=&ab2r=&os_version=&oaid=wwipjrudiagc4r5stw3iciqop49bkd2u&domain_onclick=https%3A%2F%2Fibekraiysurvey.top&m=link HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; oaidts=1698350669; prefetchAd_6207682=true; ID=wwipjrudiagc4r5stw3iciqop49bkd2u; syncedCookie=true; prefetchAd_4292574=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 9a6ca73f53b0ac79c7b51948f1c59bd8
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
oaidts=1698350669; expires=Fri, 25 Oct 2024 20:04:29 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Nov 2023 20:04:29 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6M5sb3lhE5nqEtb7dFYXUKzzLRFyUTZ%2Bj2qJeYw3yxzCs6rP2Kicz5Fgr3pbtAjQJA9aiN92SJFaP3e%2BN0arOtIwUyjngGfnmBUhnIFDa8bPWjZ7bKGeasiA5UcgWs89EAWqao0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f040f5456cc-OSL
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-redux-toolkit.esm.js.7f3423c8.js
200 OK 11 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-redux-toolkit.esm.js.7f3423c8.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (11320), with no line terminators
Hash 20d0370a129f98472a0b284bb528aa57
80463f43ec84c1c1b0989074c1c82a5baeff08d7
e8fb6d1dd672492e1d3ef1c01c25b40f453e54547ed59eaf30776479d60af05b
GET /js/v-redux-toolkit.esm.js.7f3423c8.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-2c38"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CXNyhtM%2F6Ta2Zyouc0HFWk6hoagRA%2BVHAKJpOt79X9Ye%2BOLMxZEWn9fMdknHk4q%2F%2B0qU%2BVhkAMMrcM2RVn0h8FAqQoX6b1ijb22i7ODlfYt2SmXRubHEo%2BBefuALUi%2Bcx0nq7Ig%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9af56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-react-dom.production.min.js.1769e0c0.js
200 OK 129 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-react-dom.production.min.js.1769e0c0.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (65440)
Size 129 kB (129359 bytes)
Hash 5c4c7547ffe7d28a1889a4c34a0a6cd7
26bb01c286bf210fcf54c75c262538ddd3017de4
46d7c681553f597021dd7678745e853f88733a2a20afcd4aea8621b3a41cfd96
GET /js/v-react-dom.production.min.js.1769e0c0.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1f94f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PWt6gh88HF1ubAJmpCmvo86HLGHjWF1fz5MPTwxEBZT1MRS3LVZjGH8C%2F%2B3BsKyqPtPoXJHGYuNRTMzfbiuoZv3UwJ6sTOzko%2BKBS5vrYldq%2FTH%2FOhL2oy88NN59skWjnwSJdto%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9c156cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-immer.esm.mjs.9a69b4ea.js
200 OK 10 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-immer.esm.mjs.9a69b4ea.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (10499), with no line terminators
Hash 92d5c68c695c9ca3483585157a3f4a36
c650874d9d3d5f63f03f41474f8f3124216a9217
8946d9b83b394bf94e7d001fcd7e37ca21d53a3af872fc6624220c12bfd2f947
GET /js/v-immer.esm.mjs.9a69b4ea.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-2903"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3402
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QYgbKlBpAhwWCLCeVjXPo6EyjI6h0ugU%2FaYp8J6exBQWWjUPKQ2lGE0YEyAw19N0dRlfTzJdk2Jc93UAOe7oOzjEMtSdXwnkDj5lAbkE349PBYdSdstAStFHBrfMGZsC8du8wiw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54efdf9b556cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=wwipjrudiagc4r5stw3iciqop49bkd2u
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=wwipjrudiagc4r5stw3iciqop49bkd2u
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash d88cc8a5c789585bffa9938076e8daf2
fc2e8856bfb05cab24fafc0aadb03dbf31427a9a
ffbe57d6312938cac7e001f7c94506b2c83b3b027befa65045a88aa61c6e261a
GET /gid.js?userId=wwipjrudiagc4r5stw3iciqop49bkd2u HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ibekraiysurvey.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://ibekraiysurvey.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=wwipjrudiagc4r5stw3iciqop49bkd2u; expires=Fri, 25 Oct 2024 20:04:29 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
ibekraiysurvey.top/js/v-domparser.js.22fbaac1.js
200 OK 1.7 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-domparser.js.22fbaac1.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (1772), with no line terminators
Hash 9045ceb0c783e0fa7aa82596ec91f993
1f497d8cd740c3c620eeff924b43f4a99872806e
a497b7d742765ec5963db3e12efc0b06e3040068edb48b9781e3995c75d262ad
GET /js/v-domparser.js.22fbaac1.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-6b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=auJMZVl6V69qqoMSXUSnmqsLB6q%2BEFNLbLwG%2B6D%2B1Ta7V4EqTOrUmT6fQgPyZtkxW2U0v0wuYy3brFwBYgcOYgRHioaEks5QQ5veJepkd3dJOP1ZFkVGSlLOZpizui8CgaeXxLo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effcb6956cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/js/v-node.js.d0dda615.js
200 OK 6.3 kB URL GET HTTP/3 ibekraiysurvey.top/js/v-node.js.d0dda615.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type troff or preprocessor input, ASCII text, with very long lines (6337), with no line terminators
Hash bffd29f5ad49a4ff3cb5e508eea9e50b
c96996da407993a48a0aa5b9508c4d147bd0ae77
6a3e07c425be24b355244e4c04117258314da629d65e6974db9add14b92d11e8
GET /js/v-node.js.d0dda615.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:28 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-186b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=77k%2BiA4623Hjz%2FWolSFLut8RPH8snIyfNlp5iB05TzXi%2FS%2FEpbFuSuo1otdtRbtaztXvaAEfFXZwG%2B2efHMhmmfX%2B3noY2dnmbkANmvHS15CToTKepOdOX5%2Fk6sMpI1Jtv6LX6Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54effbb6356cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ibekraiysurvey.top/pfe/current/stattag.js
200 OK 19 kB URL GET HTTP/3 ibekraiysurvey.top/pfe/current/stattag.js
IP
Requested by https://ibekraiysurvey.top/finance-survey.html?z=6235319&offer_id=9540&var=8&ymid=3tgjo34sp4bv
Certificate IssuerGoogle Trust Services LLC
Subjectibekraiysurvey.top
Fingerprint94:06:22:34:38:FC:70:34:0F:1B:38:E2:98:2E:B9:82:2E:50:AD:22
ValiditySat, 07 Oct 2023 20:45:42 GMT - Fri, 05 Jan 2024 20:45:41 GMT
File type ASCII text, with very long lines (19024), with no line terminators
Hash eee0fa1cefab154ab482da73fe023bee
1d3c88baee1b8527a30190d694cc8c6378b7f3bc
333132f2f62e5bcef5ab8a1950e7a8342023c0cea68b563b1130bea16dd0bc6a
GET /pfe/current/stattag.js HTTP/1.1
Host: ibekraiysurvey.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=wwipjrudiagc4r5stw3iciqop49bkd2u; oaidts=1698350669; prefetchAd_6207682=true; ID=wwipjrudiagc4r5stw3iciqop49bkd2u; syncedCookie=true; prefetchAd_4292574=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 20:04:29 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-4a50"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3401
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N2X%2BlQVJP%2F4kT18%2BsON%2BV7AXdB3g9%2F3IHRUgcW5LkNlUOm18q4lApLNXj%2BNB%2FpF675MXeFV1vScg5OcGFjp%2Be8Sv3LDv%2B36%2F9I7UcVZzz37MLRg83ekvh8breuvVTxI8GXXenJQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c54f047fcc56cc-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
172.67.210.68
139.45.197.250
104.18.15.101
37.48.68.71