shunumsasurvey.space/js/betting-survey.31d6cfe0.js
172.67.187.233200 OK 0 B URL GET HTTP/3 shunumsasurvey.space/js/betting-survey.31d6cfe0.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/betting-survey.31d6cfe0.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
etag: "64ede278-0"
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
strict-transport-security: max-age=1
vary: Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M0OGgFgMPjhYoW70QM1Vyb9mhwUmbwT%2FpFH8m2WZKM%2F2DTlxBYinQKKEk%2BRNYhd%2FoZq3cHHtfW4Yv%2BCu1RN763GNqWGLUkHocXh7q8x9O8%2FEhGsBtycSue%2FvSVWfUEaUrSFPy%2B0lMQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e8b20b02-OSL
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/css/betting-survey.15253455.css
172.67.187.233200 OK 7.3 kB URL GET HTTP/3 shunumsasurvey.space/css/betting-survey.15253455.css
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (16938)
Hash 9f9b3c79e2544e469bffc6e0c672d20f
bb5f6642b8a204d87e9dd1d3177ef2dc49c72125
af6208ce2c7d1a5049b0f34efd3c1e8084914304dfa37d321fec3c7ee229f11a
GET /css/betting-survey.15253455.css HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-6426"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6%2FC3YkS2Eees%2BkPC7hazjm9TOzsQKkkzptIGpq02zu3TvjaqTCoJM6D6FK5qULiXesPNqS8kXNH87jIrtqdjQG59F1fwlrY4EmYWOY%2FOhAYOoKMdaOkw5tP%2FOV6z6SPtFl6Fgicsrw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769f8b80b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/gid.js?userId=92n64zi1f57hy2aokm9rprjx6xzg5suw
139.45.195.8200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=92n64zi1f57hy2aokm9rprjx6xzg5suw
IP 139.45.195.8:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintB4:02:64:AF:5C:AB:27:5B:1B:80:CF:C8:FF:EB:BF:43:29:C3:C5:C1
ValidityTue, 25 Jul 2023 06:29:27 GMT - Mon, 23 Oct 2023 06:29:26 GMT
File type JSON data\012- , ASCII text
Hash 1dd10e65c958f1dcefeb6c18a7a01e11
427df7213688ca79574153993895d058c34fb760
0b3751dea74cdc3dbcb6e52412478c32db742319f8866f5556b211599c45421d
GET /gid.js?userId=92n64zi1f57hy2aokm9rprjx6xzg5suw HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://shunumsasurvey.space
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=92n64zi1f57hy2aokm9rprjx6xzg5suw; expires=Wed, 28 Aug 2024 18:04:26 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
shunumsasurvey.space/img/betting/sport-betting/boxring.jpg
172.67.187.233200 OK 35 kB URL GET HTTP/3 shunumsasurvey.space/img/betting/sport-betting/boxring.jpg
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 594x396, components 3\012- data
Hash 59f6db21d27411ac7db9e33e7118afd7
fe5492b3b5ad526b6b6eec35df49fec77eb65bd8
224d6eef128fec42f4f88bf2ebe47a794efe908fdce509e76624b3a67a46afbc
GET /img/betting/sport-betting/boxring.jpg HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shunumsasurvey.space/css/betting-survey.15253455.css
Cookie: ID=92n64zi1f57hy2aokm9rprjx6xzg5suw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: image/jpeg
content-length: 34756
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: "64ede278-87c4"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vl9I8L%2FDuEiL52w3xEUsaPDkrxNiZsAtpUwobhc%2FEGjRElKcxpGT%2BFphkDydPBNBviA87lwLerPQtUfEnnWIoK3EoLb%2BT7wrEyMT%2FYsAe9EokxO%2F1MSjIZFOwdFAZYHc7RJlYtvVqw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b76d9d910b02-OSL
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/img/betting/sport-betting/ball.png
172.67.187.233200 OK 8.9 kB URL GET HTTP/3 shunumsasurvey.space/img/betting/sport-betting/ball.png
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type PNG image data, 211 x 74, 8-bit colormap, non-interlaced\012- data
Hash 1996da1f1ba200583670ac3bde5429a5
4acaa7752187db5dff15b62b2879608bce23ea7a
0ec27c2ece4366aad1669dbcc2b0bdffd9bf949de3e199f09fafc9ce45ce925c
GET /img/betting/sport-betting/ball.png HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://shunumsasurvey.space/css/betting-survey.15253455.css
Cookie: ID=92n64zi1f57hy2aokm9rprjx6xzg5suw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: image/png
content-length: 8860
last-modified: Tue, 29 Aug 2023 12:20:09 GMT
vary: Accept-Encoding
etag: "64ede279-229c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=weI%2FlmBuGLXh51o2JznB5JRalgAEe1SkdZA6cG%2BzsnsIpsW3tLH3r%2FA%2FQ7i2h1mIs9gnOetc%2B4z429x9e6RZmrBFecN1oYWzMWEBr5SDDmSf%2BgP9HUZrTp4UhqWpmpHLiVITe1BcbQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b76d9d920b02-OSL
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/_each-land-config.3154cc14.js
172.67.187.233200 OK 20 kB URL GET HTTP/3 shunumsasurvey.space/js/_each-land-config.3154cc14.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (65452)
Hash 49d6a7ee32c98cc05c4a9803501a430c
cb68987c9ecc2e91ea80a87735b0fcd203dd4f36
d4c1e450d8fbaa251e0feb54d3031890c833ff0c13108c734288d1e6f38e5f03
GET /js/_each-land-config.3154cc14.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-11c08"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vsax7AjKs07YiCByLnLMJUfUNDSWB3T1t8%2FCEQ1DJPcDBogSfuH76AelO6rjMSkv3M5KMAPfVRjZwCwpbTyEktz8f3FhIEtOzV7Lxf1FjwYP2Zlt0fjhBha5QfNOamNa9QHCBackug%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e89f0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
139.45.197.248200 OK 0 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:27 GMT
content-length: 0
access-control-allow-origin: https://shunumsasurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-do
139.45.197.248200 OK 179 B IP 139.45.197.248:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash e038f5feccc9daf849b54fcb2e2be299
d45b65b1beb71aed233f69c15151c62a45ab7470
aa70ac485ebebd44bb4024121629e67b66ff1176ed2cfb9f4a7d4ed174e0506d
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: 4c1459f1c4345961c44eb2d2d3df0d7d
access-control-allow-origin: https://shunumsasurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 250
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 8d2358e461cc971678795ffc3c4b0528
access-control-allow-origin: https://shunumsasurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
139.45.197.151200 OK 11 kB URL GET HTTP/2 pulsersurvey.com/contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png
IP 139.45.197.151:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectpulsersurvey.com
Fingerprint42:10:93:10:40:21:61:6F:65:7D:89:FA:0C:65:E3:A7:B5:3F:44:5F
ValiditySat, 08 Jul 2023 05:05:27 GMT - Fri, 06 Oct 2023 05:05:26 GMT
File type PNG image data, 140 x 140, 8-bit/color RGB, non-interlaced\012- data
Hash 0fb5a0eccfe6fe27747ca4a84abb1c9b
f83ae7f2c746872a9ba9da626928946e3b6de28d
70eba3a4b499c4ffe4a8e62461c1b8581a9dd904f14b5742b48632dbebdd30a6
GET /contents/s/0f/b5/a0/eccfe6fe27747ca4a84abb1c9b/0926450336462.png HTTP/1.1
Host: pulsersurvey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: image/png
content-length: 10580
last-modified: Thu, 21 Jan 2021 09:10:34 GMT
vary: Accept-Encoding
etag: "6009450a-2954"
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS, HEAD
access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
access-control-expose-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Content-Range,Range
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.14.101 471 B IP 104.18.14.101:0
Hash 7cb17505d8baebde11498d4851cc3c5d
653d8cf270a76c6b8c5ab75f46defbb9266067ed
6ea895f5839a92e32142796ffac81147ff7a4e94da249ed4171fc65adc8d991b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 29 Aug 2023 18:04:27 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 28 Aug 2023 04:43:56 GMT
Expires: Mon, 04 Sep 2023 04:43:55 GMT
Etag: "653d8cf270a76c6b8c5ab75f46defbb9266067ed"
Cache-Control: max-age=471251,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7fe6b76f6fc40b49-OSL
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
139.45.195.253200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 139.45.195.253:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1336
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Tue, 29 Aug 2023 18:04:27 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://shunumsasurvey.space
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintAC:21:7D:96:2E:5C:A3:8F:C0:B6:FC:84:85:4D:EC:3B:82:39:43:65
ValidityFri, 07 Jul 2023 13:30:53 GMT - Thu, 05 Oct 2023 13:30:52 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 69
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 788910a0bf694f45cf80719005a9c692
access-control-allow-origin: https://shunumsasurvey.space
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
shunumsasurvey.space/js/v-redux-toolkit.esm.js.430bcd88.js
172.67.187.233200 OK 11 kB URL GET HTTP/3 shunumsasurvey.space/js/v-redux-toolkit.esm.js.430bcd88.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (11315), with no line terminators
Hash bfebd9a18434baa077f76012b2824b44
03a82050eeaaf2ae11a66cbba4756638b6f25121
8c978fe18ac3af15386feeeb4e600dbc6894a36d9c488067a910eb46148d56e3
GET /js/v-redux-toolkit.esm.js.430bcd88.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:09 GMT
vary: Accept-Encoding
etag: W/"64ede279-2c33"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jJKnCz3Buym7a44mrYHEbrsH4yuc%2BiBrWqLVyb3eQb9XoQ4Rtg%2Fxadj4ljBqldMD%2FySCNBuE0aEWjbYihzXHKPChJdALCMejHIIXP0dM7ukpUlMGHOEpZTR7umujLV0%2FeHWwr7rr%2Fw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e8970b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/favicon.ico
172.67.187.233200 OK 1.2 kB URL GET HTTP/3 shunumsasurvey.space/favicon.ico
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
GET /favicon.ico HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: ID=92n64zi1f57hy2aokm9rprjx6xzg5suw
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: image/x-icon
last-modified: Tue, 29 Aug 2023 12:20:09 GMT
vary: Accept-Encoding
etag: W/"64ede279-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=luz%2FTh7FS68N4UWboiKBmbh81ePAh2IblcCbEePfzkHZSIS%2FFidi%2FBdtNkkLosFabwbYQbrx0kCsWDnKZ%2Fcjg519VVJGO%2F2Wy93aq1iCH89wpEtQ%2Fmndve7Fv21d5fSYruJqs%2BBTvA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b770ba640b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/betting-survey.html
172.67.187.233200 OK 4.7 kB URL User Request GET HTTP/2 shunumsasurvey.space/betting-survey.html
IP 172.67.187.233:443
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4878), with no line terminators
Hash f8f0259b17710d0b2660943f028849cb
2b05ac79168e1f16d301737c6167aaff00cb7b35
e382657f11a9517e8634ebe751f96088319ed61e6b56a281f1741e3a50210661
GET /betting-survey.html HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: text/html
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HNU3A5vxCo9Srm3AxbNhXamu7trAsVz5uwQQsD5wd7FcVOqTE%2Fm78ZLfP3QC%2BubGaXDm6WBXa604g%2BHWUpvcp2CkEt96UyO6fIVN5tU2XS2QXSDeTtqgImTueCNJBA2ujYo28v%2F5pA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b766a8df0afa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
shunumsasurvey.space/js/_core-survey.ea588d1c.js
172.67.187.233200 OK 224 kB URL GET HTTP/3 shunumsasurvey.space/js/_core-survey.ea588d1c.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
Size 224 kB (223656 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /js/_core-survey.ea588d1c.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-369a8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wJORjzzOKRUVNtZWCN%2Bv%2BXHP31H2GXa%2FLfdiMnIFpd9AHIme2QvTTJwVdOjpJAh%2F5SC4IYy0050hr%2Fvu2ZAAMofR8j6rMO6oxlundX0j7y%2BoMY%2Fq3qzAmMmCaHd7YXhBXd31ed8eMA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e8a80b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
cdntechone.com/stattag.js
172.67.138.133200 OK 18 kB URL GET HTTP/2 cdntechone.com/stattag.js
IP 172.67.138.133:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint22:B1:48:87:A8:EF:B2:9B:65:EB:D6:C6:FD:8D:EF:A7:A7:DE:52:29
ValidityThu, 26 Jan 2023 00:00:00 GMT - Thu, 25 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (17871)
Hash 0fdff67feab23cc69ecfb6800fc54cb7
eb84c650e6d27e290795207b1f37dd7b67f2aa06
456e420aecd5ac679cc2bcb33daf7c063f54894fd076e99e05c06629234d3378
GET /stattag.js HTTP/1.1
Host: cdntechone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 08:43:53 GMT
etag: W/"646736c9-4859"
link: <https://datatechone.com/>; rel=preconnect; crossorigin, <https://datatechonert.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3187
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=esSwhy19o7DwtG6xA5Hg99aFbYF9%2FI%2BGWMei6QrBhfzdSvJoD0u3eFiBxtYwid%2BPrjrAj1OAugNWs%2BshIlvhegqGzbmOEMVBKd7eCfjilxref92R6G9p2fD%2B9QtkVAevXw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7fe6b76c59780b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
shunumsasurvey.space/js/_global-config-sd.99ea4687.js
172.67.187.233200 OK 1.8 kB URL GET HTTP/3 shunumsasurvey.space/js/_global-config-sd.99ea4687.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (1827), with no line terminators
Hash 6d789d9c6e6ded60bfa9caa0f347a1e7
357644479d23ef2e0a8f8a3a881054fbc219ce82
ef657ab682c25bd2718b4470c5534badc985aee518c76d8f3768ab51912c36a5
GET /js/_global-config-sd.99ea4687.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-6fd"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z1PvsW%2BzzjWkDbVgtrufM6mE8KmaIl5AtevWLAS2COqOWn2%2FEZIM35UnppWq%2FUy%2BvYsHCInleoJiYuX7m4l5ITFkK8drhA%2FtCjXsqCkY3RiEf6NxDWI%2FCi2Hu8ljnwuCNc1N4DQYLA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769d88b0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/v-index.js.310b7c57.js
172.67.187.233200 OK 41 kB URL GET HTTP/3 shunumsasurvey.space/js/v-index.js.310b7c57.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (40770)
Hash 78b9a3afa44d486673292bca43884e8d
bd81c8866df8d6a4afcc23085f879afabb01cd65
804d647522c8c5ab1dae17d01982fb12dbe72c680628e5560d949688b1443ba2
GET /js/v-index.js.310b7c57.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-9f8f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CGCpjlApqsCVpDh9R%2FVmLJAgxfieirKtu%2BLwqiQJ2c4sqs7qTcGPniISXk8kTHhtqrP%2BUSMSjDt2hi%2BobYhfQCFy%2FIyRbk%2B2oYvZvLdy1rSvzzBVusXbEdu0yZYiXzH6g7rpt0PRDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769d8900b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/s-storageService.js.60b127af.js
172.67.187.233200 OK 2.6 kB URL GET HTTP/3 shunumsasurvey.space/js/s-storageService.js.60b127af.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2623), with no line terminators
Hash 28c1a3ee0ab986887319451c65b863ea
cb36eef4f8d619d548faa92394c7f9e675f046ec
2493ce9c4ae70fbffce4f6dc507ea789d3a1f58e380f32ed218677a8f167d18c
GET /js/s-storageService.js.60b127af.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-a0b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8uUZrPfIMrl2w%2BaDkGdHSGuDY2WEIC17i0z8YXtTF%2FOx%2F0eYlAOthKxXfeAkxg9x3xlW1C04NdISfCzJNjhd0AjaZ1VV%2FyO8urDWgGd5IbrM1jESPDk2sfRh8MBlp9VnQ4iHVhtu5w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769d8930b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/v-react-dom.production.min.js.d6db945e.js
172.67.187.233200 OK 129 kB URL GET HTTP/3 shunumsasurvey.space/js/v-react-dom.production.min.js.d6db945e.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (65440)
Size 129 kB (129356 bytes)
Hash 1f183f98fb69c224781e4d5297584e83
44d5510e6674c468992de67d1ebb4222a373ac87
1a9e0027cf97508170159cc2fc1f3b5d1e9237dfe47150d10a9174bf2cb35945
GET /js/v-react-dom.production.min.js.d6db945e.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:09 GMT
vary: Accept-Encoding
etag: W/"64ede279-1f94c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b3AJzBOIwBrtx233LRUFgT%2BC5jJhi9p%2BtgS8XNzOavWZu15fUkNxMqtxdluNMHKTfAqqyYDwkaDWEgq13Ce7s%2F%2FXOrYBUGRY0NFHZNRF3hwFQvqwFF5qQKNQtxtHjgsrJTtTQBJ78A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e8a70b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/v-immer.esm.mjs.5f6ab715.js
172.67.187.233200 OK 10 kB URL GET HTTP/3 shunumsasurvey.space/js/v-immer.esm.mjs.5f6ab715.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (10498), with no line terminators
Hash a4a4ff7ca1af4861bcd2aacaf7d3333f
cbdbc9cc6eada711f2d7d61b86d25b9e4a38cb0f
89fa625aa4f77dc6948e0888d27721c52951e719ad752a2bb1f399683358cc01
GET /js/v-immer.esm.mjs.5f6ab715.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-2902"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WkkiZs%2FSjZ02Kmh0p1RHjZ0vvqqv4qJdtVeqKLXnm6uifLZseCHoUuPV8%2BUei07yxJRV7slriHHZUpft%2FpnzBIQNSxbI%2B3o79hqSJRA18UyDQNAgIQ7dxR3L%2BHl7nR4zps5zbOO7Og%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e89b0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/config/data/sd-1509016.js?v=10
172.67.187.233200 OK 2.4 kB URL GET HTTP/3 shunumsasurvey.space/js/config/data/sd-1509016.js?v=10
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (2566), with no line terminators
Hash a079f6cca8e37ec1b38e0d211c489df6
25e8607726c49c41be13e2aba1339d8a0ca81b55
0bfa53b77257d264e6ba8b7723eb67c44440fc3d535d3507732e8f90d8edb74c
GET /js/config/data/sd-1509016.js?v=10 HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-96c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3K1eYeH0359lFHbyMqcmciPFJRHXeYNztP6Uo0YfYEi7rfvBvX7qWCL2KoX1bSbh9EbNJmPUctN5mqRhtYxXw81uRm5AvlgnNkhUrS1ZYVJEiMlASU%2FiDJ%2BlxwL%2BJvt3ldfXeQmWPg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b76b4a640b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/config/dict/cookie-consent-1.json?v=10
172.67.187.233200 OK 6.8 kB URL GET HTTP/3 shunumsasurvey.space/js/config/dict/cookie-consent-1.json?v=10
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/json
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2B%2BO2sJISl22Oe2MYznFieOLQgqFdbHRd7BmMGv%2B7J%2BdQ93j68oGjUl%2FhOr8QISrb98eL1zTh5uvmavBCfvG325nJ%2Ba2VYcV7JrTvpohauH59ebRVlJvsNVNEvR178F34YDCd8Fb5pw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b76b5a760b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/BettingSurvey.153f7484.js
172.67.187.233200 OK 1.0 kB URL GET HTTP/3 shunumsasurvey.space/js/BettingSurvey.153f7484.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1070), with no line terminators
Hash 717c37887d2c39d6b75a34f1d50b8bf8
feb40ae4b4e1a17420d812059aa013fd2efe19aa
9d2f05a7067180d737b35ebaa8bfed93c94bd59288cd1adf74cc66f28b4642bb
GET /js/BettingSurvey.153f7484.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-3ee"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OZjSZQyuMStwx%2BkjF8C2bai97sEFh3fk%2BHIFUWq%2FdvV%2FG2nnRV2UE5WLEXfrQX3LfeCkUgQalYQQtV6Oc3Jp%2FmoPAApscnoQvKD%2BxIL%2FB4q0SpBcZnnjwmeTo%2BDPsuBTcxUG1WyD2A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b76c0b5c0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
offpichuan.com/rotate?zz=5592661;5592658;5592700;5592702&var=&uid=92n64zi1f57hy2aokm9rprjx6xzg5suw
139.45.197.237200 OK 1.7 kB URL GET HTTP/2 offpichuan.com/rotate?zz=5592661;5592658;5592700;5592702&var=&uid=92n64zi1f57hy2aokm9rprjx6xzg5suw
IP 139.45.197.237:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
FingerprintB3:98:30:CE:12:43:37:36:2D:2C:42:4E:37:44:7B:6F:D7:01:67:BC
ValidityWed, 21 Jun 2023 02:43:25 GMT - Tue, 19 Sep 2023 02:43:24 GMT
File type troff or preprocessor input, ASCII text, with very long lines (1711), with no line terminators
Hash b48d9123a76b63acbf348940f1201cbf
2da283695e502defa06f606042c1a9162d38055d
95389a3caf927bfdfe912c14ec54a7fc4211454cdead575c5dc32ce590f24520
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?zz=5592661;5592658;5592700;5592702&var=&uid=92n64zi1f57hy2aokm9rprjx6xzg5suw HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://shunumsasurvey.space
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 29 Aug 2023 18:04:27 GMT
content-type: application/javascript
x-trace-id: 6c36e6eb10ca0b5744c0bc0e0fe02898
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://shunumsasurvey.space
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=92n64zi1f57hy2aokm9rprjx6xzg5suw; expires=Wed, 28 Aug 2024 18:04:27 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
shunumsasurvey.space/js/_is-browser-supported.065ad601.js
172.67.187.233200 OK 3.8 kB URL GET HTTP/3 shunumsasurvey.space/js/_is-browser-supported.065ad601.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (4034), with no line terminators
Hash cecdbba073dba87969cdab7b727a2bc6
2e46e9f3081c3f32a002323220099d7aa9b2a071
86befc2ae7eec90dade3f45a32a709c3447b9fc34991848ef53d49d7266fdddc
GET /js/_is-browser-supported.065ad601.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-ed7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dFK29c45A%2FkYdtH%2FRSxJRMak7Dl%2BFHh4mZkEVLkmYUWiztnkLl6t9TxMdCKOi8el2ZApbHk3aZDi%2FDIXMcSFLMTcIxeu2P%2BJf%2FpLfPED5WrcY6N%2FNG%2BzqHTS%2FeMos4qgTDiD6S9HAQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769d8800b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/_rtc.cfe25360.js
172.67.187.233200 OK 11 kB URL GET HTTP/3 shunumsasurvey.space/js/_rtc.cfe25360.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (11189), with no line terminators
Hash d275be7b9cd66b83c8187c69d09bcaa8
5c2408cd3557227ae4b67facfecbc9f1b5afc832
a5af3b768f135c069d5cb107b0e325a5557fdebe0a52c49adab39db569f0f91b
GET /js/_rtc.cfe25360.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-2bb5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3wrEqjBagFT2Ptnf3XBaWGCSM9hrM%2FJxmIz%2BF9TWYjv0xBfE%2FQHbUFsPLsvyYT7wAJstPdr45moB6TkmKqdaAzxQ00e89huVWKBu%2F1vrOlr%2Bihh9HNv6D7S3c%2BqTf%2BSlvrSqQzYohA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769d88e0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/js/v-index.mjs.c7d7b478.js
172.67.187.233200 OK 35 kB URL GET HTTP/3 shunumsasurvey.space/js/v-index.mjs.c7d7b478.js
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (35191), with no line terminators
Hash e0649b917bc67e5ad0c8f041aad1cf38
ee18c627c2853a9e666a2ec4e7e897c394ef31a9
8d8402b626120ca5cd815ee1ff2d6bca92b71401b0942e293a9672410949f6ab
GET /js/v-index.mjs.c7d7b478.js HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: application/javascript
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-8977"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7Xdxa%2Bha6huinINJ%2BQEO%2Fz6VdECxZnZQFFD4au5ZFR%2BADyFKwYgE34PeE4vvMhIOE2Vk42EMTIkJtdTJ3C3R8uuu7PisTY%2Fw2moCDrS2iSWVkMoq89sNv5sBJbnd7FhK3nJB3srYBQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769e8a20b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
shunumsasurvey.space/css/_core-survey.12d8b5b3.css
172.67.187.233200 OK 3.4 kB URL GET HTTP/3 shunumsasurvey.space/css/_core-survey.12d8b5b3.css
IP 172.67.187.233:443
Requested by https://shunumsasurvey.space/betting-survey.html
Certificate IssuerGoogle Trust Services LLC
Subjectshunumsasurvey.space
Fingerprint13:26:B0:2C:21:2F:64:56:3D:14:AD:69:29:DD:25:EB:89:D2:FD:A0
ValidityFri, 21 Jul 2023 17:16:49 GMT - Thu, 19 Oct 2023 17:16:48 GMT
File type ASCII text, with very long lines (3377), with no line terminators
Hash cfdaa463a282eaeeef08efa3bc2ec095
98c7f4d9911c028143d5c2d0a91f470b847ac872
2a5c8182a5599f2dabdbf95dda4f3a1d7638d1db2cdd4d58e01800f5d574e135
GET /css/_core-survey.12d8b5b3.css HTTP/1.1
Host: shunumsasurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 29 Aug 2023 18:04:26 GMT
content-type: text/css
last-modified: Tue, 29 Aug 2023 12:20:08 GMT
vary: Accept-Encoding
etag: W/"64ede278-d2a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H2jCX3RVkysfPRz8jm%2BpHBmxujnBLCxbFoL6oQnODA1DY9F%2FbDpx6IZBbyIFBQ2cdphtcL37%2Bih5BMpUR1reJa%2F%2Bp5XOev0N57KqfWQ8wRdZdLwm8TD389z%2BMOEMfz%2BeRxuaOTKTpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7fe6b769f8b40b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400