www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7294355293406756940&website=25426-5a4e140z&placement=25426
51.68.85.158 4.3 kB URL www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7294355293406756940&website=25426-5a4e140z&placement=25426
IP 51.68.85.158:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3487)
Hash aa9c704247de0aed9e0cbd4974e3f772
fcafc94112ef492ef75478190a848a4342ebf8b0
f8daf13ed316cf4320ed53a89cca7c9dc3b214ae167a1c692fe3b50bf1e68ec8
GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7294355293406756940&website=25426-5a4e140z&placement=25426 HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://prize.youarelucky.click/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Oct 2023 19:43:59 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: no-transform
Accept-CH: Sec-CH-UA-Platform-Version
prize.youarelucky.click/favicon.ico
108.178.23.114 1.2 kB URL prize.youarelucky.click/favicon.ico
IP 108.178.23.114:0
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 91abe01116ab422c598e9c8af72cf4da
0f2815fe8e067d48537ad168225ab4674271fa27
b1d7aef06456fe7431124129a28f0138bb5fccfa4f4161e3087de23c005e5edc
GET /favicon.ico HTTP/1.1
Host: prize.youarelucky.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://prize.youarelucky.click/proc.php?4261abdfce52d95ff5fae4bb311c2b42535563e9
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:43:59 GMT
content-type: image/x-icon
content-length: 1150
last-modified: Wed, 31 Jul 2019 07:48:51 GMT
etag: "5d4147e3-47e"
expires: Fri, 27 Oct 2023 19:43:59 GMT
cache-control: max-age=86400
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
prize.youarelucky.click/?utm_medium=c7069e939b860228ac9c4f5b0798b92843c0aa3c&utm_campaign=nfpf&4=22
108.178.23.114 3.1 kB URL prize.youarelucky.click/?utm_medium=c7069e939b860228ac9c4f5b0798b92843c0aa3c&utm_campaign=nfpf&4=22
IP 108.178.23.114:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (4682)
Hash deb27dc097c49367afdef3653c29ece4
7efcdfd61641630530ba1c79250fcae552895d2c
069c922d7e0aaa9b81275cf27758cf4805ee9de04fdf0575715baf62ee202dc0
GET /?utm_medium=c7069e939b860228ac9c4f5b0798b92843c0aa3c&utm_campaign=nfpf&4=22 HTTP/1.1
Host: prize.youarelucky.click
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ad.admo.buzz/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:43:58 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
x-powered-by: PHP/8.2.0
cache-control: no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
accept-ch: Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version
content-encoding: gzip
X-Firefox-Spdy: h2
www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7294355293406756940&website=25426-5a4e140z&placement=25426&eyeg=3&eyer=0.5485972121014128&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=prize.youarelucky.click
51.68.85.158 0 B URL www.marketfoog.co/?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7294355293406756940&website=25426-5a4e140z&placement=25426&eyeg=3&eyer=0.5485972121014128&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=prize.youarelucky.click
IP 51.68.85.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?sl=5688507-49bf8&data1=Track1&data2=Track2&tag=M7294355293406756940&website=25426-5a4e140z&placement=25426&eyeg=3&eyer=0.5485972121014128&eyei=0&eyew=1280&eyeh=1024&eyetd=220&eyef=prize.youarelucky.click HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Thu, 26 Oct 2023 19:43:59 GMT
Content-Length: 0
Connection: keep-alive
Cache-Control: no-transform
Location: https://admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000f4ea0e67d21f30766e1227e34d7088211026-202310-flb*5688507-49bf8*M7294355293406756940*sl_5688507-49bf8*67fd35b5c2b21be229a97075501a76907b067d9a*25426-5a4e140z*25426
www.marketfoog.co/favicon.ico
51.68.85.158 0 B URL www.marketfoog.co/favicon.ico
IP 51.68.85.158:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: www.marketfoog.co
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 204 No Content
Date: Thu, 26 Oct 2023 19:43:59 GMT
Connection: keep-alive
admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000f4ea0e67d21f30766e1227e34d7088211026-202310-flb*5688507-49bf8*M7294355293406756940*sl_5688507-49bf8*67fd35b5c2b21be229a97075501a76907b067d9a*25426-5a4e140z*25426
34.147.1.177 0 B URL admoustache.media-412.com/sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000f4ea0e67d21f30766e1227e34d7088211026-202310-flb*5688507-49bf8*M7294355293406756940*sl_5688507-49bf8*67fd35b5c2b21be229a97075501a76907b067d9a*25426-5a4e140z*25426
IP 34.147.1.177:0
ASN #396982 GOOGLE-CLOUD-PLATFORM
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=63ef5a2a8dec34873b6049c7&pid=503&sub1=33000f4ea0e67d21f30766e1227e34d7088211026-202310-flb*5688507-49bf8*M7294355293406756940*sl_5688507-49bf8*67fd35b5c2b21be229a97075501a76907b067d9a*25426-5a4e140z*25426 HTTP/1.1
Host: admoustache.media-412.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 26 Oct 2023 19:44:00 GMT
content-length: 0
location: https://www.cogliatu.com/rc/a91581ead4?affclick=653ac180a89a6e0001dfc420&pubid=503
x-adjust-use-original-forwarded-for: 1
referer:
referrer-policy: no-referrer
set-cookie: afclick=653ac180a89a6e0001dfc420; expires=Fri, 25 Oct 2024 19:44:00 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.22 2.1 kB IP 192.124.249.22:0
Hash 1fe28d150aa7a0fddbdcaeb40f5d05cd
535f4383a22f76d8d09430702f267a8c1564b992
a1de860947019018b1cf0dd151a9b0b5fb5f5f8f31e1e032bff8a845e6b4de8e
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Thu, 26 Oct 2023 19:44:01 GMT
Content-Type: application/ocsp-response
Content-Length: 2108
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 26 Oct 2023 16:56:42 GMT
Expires: Fri, 27 Oct 2023 16:56:42 GMT
ETag: "535f4383a22f76d8d09430702f267a8c1564b992"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sectigo.com/
104.18.15.101 471 B IP 104.18.15.101:0
Hash 931e448ad3919df3b2153d54baabf72d
7038a3b59f29d6761bfff7c9a4964e7103c49ae8
977c866036ffc5ccbce15265cbc4df31b93c4a16b701c66121c1f65920c7dc5b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Oct 2023 19:44:02 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 25 Oct 2023 09:55:49 GMT
Expires: Wed, 01 Nov 2023 09:55:48 GMT
Etag: "7038a3b59f29d6761bfff7c9a4964e7103c49ae8"
Cache-Control: max-age=483278,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 81c5310d6fd5568b-OSL
get.contenfordphone.com/sl?id=6322ddd4737205d3c53c3d47&pid=2243&sub1=30affC1698349441aff71d141eb53977a384a351&sub5=29625655
34.90.81.51302 Found 0 B URL User Request GET HTTP/2 get.contenfordphone.com/sl?id=6322ddd4737205d3c53c3d47&pid=2243&sub1=30affC1698349441aff71d141eb53977a384a351&sub5=29625655
IP 34.90.81.51:443
ASN #396982 GOOGLE-CLOUD-PLATFORM
Certificate IssuerSectigo Limited
Subjectget.contenfordphone.com
Fingerprint75:44:CA:5D:8D:30:E4:53:09:7C:FA:1F:AE:A1:6B:32:20:20:B9:78
ValidityThu, 02 Feb 2023 00:00:00 GMT - Fri, 16 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sl?id=6322ddd4737205d3c53c3d47&pid=2243&sub1=30affC1698349441aff71d141eb53977a384a351&sub5=29625655 HTTP/1.1
Host: get.contenfordphone.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://157852.shop/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 26 Oct 2023 19:44:02 GMT
content-length: 0
location: https://soumaphesurvey.space/link?z=6483597&var=2243_29625655&ymid=653ac18204e8ba0001200e6b
x-adjust-use-original-forwarded-for: 1
referer:
referrer-policy: no-referrer
set-cookie: afclick=653ac18204e8ba0001200e6b; expires=Fri, 25 Oct 2024 19:44:02 GMT; secure; SameSite=None
access-control-allow-origin: *
X-Firefox-Spdy: h2
soumaphesurvey.space/link?z=6483597&var=2243_29625655&ymid=653ac18204e8ba0001200e6b
139.45.197.247302 Found 0 B URL User Request GET HTTP/2 soumaphesurvey.space/link?z=6483597&var=2243_29625655&ymid=653ac18204e8ba0001200e6b
IP 139.45.197.247:443
Certificate IssuerLet's Encrypt
Subjectsoumaphesurvey.space
FingerprintD5:C2:F3:FB:CF:86:F4:28:F1:6F:B7:4E:3C:1D:F1:FE:39:20:72:BD
ValidityWed, 04 Oct 2023 05:50:56 GMT - Tue, 02 Jan 2024 05:50:55 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=6483597&var=2243_29625655&ymid=653ac18204e8ba0001200e6b HTTP/1.1
Host: soumaphesurvey.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 26 Oct 2023 19:44:02 GMT
content-length: 0
location: https://absrdmn.com/link?z=3956710&var=6483597
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 8db0e957501a387bd644821ecc2a9690
link: <https://absrdmn.com>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=f66246d5136c498daabc327b5f7f7bf9; expires=Fri, 25 Oct 2024 19:44:02 GMT
oaidts=1698349442; expires=Fri, 25 Oct 2024 19:44:02 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
absrdmn.com/link?z=3956710&var=6483597
139.45.196.64302 Found 0 B URL User Request GET HTTP/2 absrdmn.com/link?z=3956710&var=6483597
IP 139.45.196.64:443
Certificate IssuerLet's Encrypt
Subjectabsrdmn.com
FingerprintC9:47:39:E7:92:4B:84:7B:D1:F3:E9:4A:7E:9D:2D:AC:D5:F8:5B:A1
ValidityWed, 09 Aug 2023 11:20:15 GMT - Tue, 07 Nov 2023 11:20:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /link?z=3956710&var=6483597 HTTP/1.1
Host: absrdmn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: nginx
date: Thu, 26 Oct 2023 19:44:02 GMT
content-length: 0
location: https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
access-control-allow-credentials: true
access-control-allow-origin:
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
pragma: no-cache
cache-control: no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
x-trace-id: 19682e3b9151d0137d0a7083b718ebf5
link: <https://zaineewa.top>; rel="dns-prefetch preconnect"
referrer-policy: no-referrer
set-cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:02 GMT
oaidts=1698349442; expires=Fri, 25 Oct 2024 19:44:02 GMT
OXCCLK=4105106.1; expires=Fri, 25 Oct 2024 19:44:02 GMT
allcnt=1; expires=Fri, 25 Oct 2024 19:44:02 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=f0cfe0fd238a4fb0a34f24cfd5353629
139.45.195.8200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?userId=f0cfe0fd238a4fb0a34f24cfd5353629
IP 139.45.195.8:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 307c9901c24caffb8f0bce1b1abba793
36581811219f6f8efde57f650a8ad4b94b7ec789
9ff9c8b735566af7b2fa77bad23d80fdfc144701bc44a7ed86a68ad61fba3a0d
GET /gid.js?userId=f0cfe0fd238a4fb0a34f24cfd5353629 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://zaineewa.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:03 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
zaineewa.top/js/v-html-to-dom.js.25ac923b.js
172.67.175.247200 OK 732 B URL GET HTTP/3 zaineewa.top/js/v-html-to-dom.js.25ac923b.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (364), with no line terminators
Hash 6f9f757558256081f4d5264d913327b8
9e8af7c1a69c367a27bebcebebdf3a787430504b
e98939a210a5fcd6c566b23bce4c91b88f317d1c5fa47afe89799ccff28e4081
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-html-to-dom.js.25ac923b.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-16c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SgA1B0nOrtmPM%2BJrcPEH0o1%2B9ybzpxtmuCk1F5RO7pCBA%2B8B8LCscp1gYhLiroEc%2BaBY1a9k22f1NIaaG%2FTTPozGPwKxuAZSkjeytDppBCBqiCHtuGbA6J68y1OnJxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531158f4656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-constants.js.f034611f.js
172.67.175.247200 OK 2.1 kB URL GET HTTP/3 zaineewa.top/js/v-constants.js.f034611f.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (600), with no line terminators
Hash 905fe1e2ff10806381ddf09497974d97
6de78ad6b3fc160f9a750ce907b6544733576607
b96c368f3a2bcad02deb9b1a4049abc8422eb9b0726bc531ec57ffa9cd11daa8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-constants.js.f034611f.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-258"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6423
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=93LQovWdOnvgS7aBWL2ia0qTYUwULSvsebgZ1wLB5nVwfu53BoYEYRa5Gqap2S345gVs37w%2FO9XBXQR%2FUdK187tiGNN6Gs49%2F5P3YmyGrpJim3djsu2G2FGt8yKPA6Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531158f4e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/config/comments/en.json
172.67.175.247200 OK 1.6 kB URL GET HTTP/3 zaineewa.top/js/config/comments/en.json
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type JSON data\012- , Unicode text, UTF-8 text
Hash 78839fd14b7a4af467f2af5e01fa3e78
6caef62470c7af62bff2f68158df90ff3d7944b0
e7c39794bf2d944828bebc5f9cb494b6377a69e40d506918ee52a7582794fefa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/comments/en.json HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7GqaC%2B5cStLqMlqKaa1MPEyLNWHN94pxZTS7jDpg63p4dkSc9a2zqPDDf17Bx6Fl4QRMiUPuLbjb8mC6uCWqSxoL%2BHPk5tyBEUxE0IuyB%2B61CQKO5vvuSmkOOMs6SNw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f0f56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-attributes-to-props.js.2fd8866e.js
172.67.175.247200 OK 465 B URL GET HTTP/3 zaineewa.top/js/v-attributes-to-props.js.2fd8866e.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (702), with no line terminators
Hash 53ae10d99fc989986a7d30427701ba02
f2b311e46d3b0954e7b8f7ad72013124ecd9f963
fbdf8678cc63d96ed164a95f06bdf2b75af9fb709441dc03d143f18b0e92f8e8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-attributes-to-props.js.2fd8866e.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-2be"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O17QYPRnU3NKAujiddHm6glOO60pgpxK9h1HTPc8oXW563wp9VVTCu%2BbUFeN4hdb87oteoso7Ox3%2FZv8Fp31Gljz0TZh2nKfYDBR3HRE6oy5ivXhVMY1NC2EOVk%2FBWs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531158f2c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 675
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 37f88f7a0a6770a664717e1398e188f0
access-control-allow-origin: https://zaineewa.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-do
139.45.197.248200 OK 0 B IP 139.45.197.248:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-length: 0
access-control-allow-origin: https://zaineewa.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=zaineewa.top&var=3956710&ymid=6483597&var_3=741493579312280258&var_4=null&dsig=&tg=1&action=prerequest
139.45.197.250200 OK 0 B URL POST HTTP/2 laugoust.com/zone?&pub=0&zone_id=6163203&is_mobile=false&domain=zaineewa.top&var=3956710&ymid=6483597&var_3=741493579312280258&var_4=null&dsig=&tg=1&action=prerequest
IP 139.45.197.250:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectlaugoust.com
Fingerprint4C:A3:DB:F6:1D:A2:D6:78:AD:0C:8D:D6:4F:CC:11:8D:EF:D5:AB:B9
ValiditySat, 26 Aug 2023 05:13:11 GMT - Fri, 24 Nov 2023 05:13:10 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /zone?&pub=0&zone_id=6163203&is_mobile=false&domain=zaineewa.top&var=3956710&ymid=6483597&var_3=741493579312280258&var_4=null&dsig=&tg=1&action=prerequest HTTP/1.1
Host: laugoust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-length: 0
x-trace-id: 750bef422353fd184162851b2c3f0d83
access-control-allow-origin: null
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 806
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3efc48e45a6eab1c5a411641ed161e17
access-control-allow-origin: https://zaineewa.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 724
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 92b544cd6dfb373e5d2ced257cbadfdd
access-control-allow-origin: https://zaineewa.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
dortmark.net/sync-do
139.45.197.248200 OK 179 B IP 139.45.197.248:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19
POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: e720192ab8ce71f9985542e37b23c058
access-control-allow-origin: https://zaineewa.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
zaineewa.top/img/comments/person-14.webp
172.67.175.247200 OK 1.7 kB URL GET HTTP/3 zaineewa.top/img/comments/person-14.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-14.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1672
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9ahRN6cgxJ70Chd%2BYPDCdn76cPtkgL%2BDyRYWZXd3vKXrZZBqJsrrJIHIZr948eopzCllOKi8%2FnUsqFwometr7cZRZL8DdcM8txlN%2FP%2BsLZHLcn0v8uQDsBnwrheNLRk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117da5d56a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-1.webp
172.67.175.247200 OK 1.1 kB URL GET HTTP/3 zaineewa.top/img/comments/person-1.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-1.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1122
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QdkJ5RsUJNiT%2Fd97tScx%2BAfw%2FaaGXKLxewqR1JHrt9SFBKmuD1rC38akXHRG8kfGDT6z20lTpnX4mGCgshQlAjPjXHGFZGqGs6vrXm8CEnSOxBYIymR6YPAKOMNpSGg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117da5c56a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-2.webp
172.67.175.247200 OK 1.1 kB URL GET HTTP/3 zaineewa.top/img/comments/person-2.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-2.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1104
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=76SOnfYcOr3nKjEMDOIAA9LqpezDMFhi9e3HX1EIhun1WrDYLIWhzLXZfjgWWQH%2Bsdhoyk8%2F5gd28c1U3dsWuwewsQSDQXkkYI9eS7T0LV%2FInaeGuSLgIyGbpsYv1GA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117da6256a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-6.webp
172.67.175.247200 OK 1.9 kB URL GET HTTP/3 zaineewa.top/img/comments/person-6.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-6.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1854
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RiWzIO%2FaHGpJYox6zHrNAmRLEw5uv0m8qewsuxKlC3c9UtRpCz1faTuaJmgUWPgmzeVLRGcJ4qYDKkl6QrUdfewFon77rIM0XVC%2BfDyvy9Kn2WRJqkpCTMizGP2LsfA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117da6656a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-4.webp
172.67.175.247200 OK 1.4 kB URL GET HTTP/3 zaineewa.top/img/comments/person-4.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-4.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1356
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zRApBXgetUWIkj%2BouyBGLQykjwbVIJJlvkh0TmA3TM6HU37oC3PcYF2A4g4vrMDolAPtWNO%2F3hA3g%2B4%2Bbdsa9PQxJEomid5FvHbzTIG0f4vHIyLw%2B4PEU3MxA2bEFUg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117da6356a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/SurveyContainer.9c23aba3.js
172.67.175.247200 OK 16 kB URL GET HTTP/3 zaineewa.top/js/SurveyContainer.9c23aba3.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (52849)
Hash 8fb74ca17e61d5652c078260fbf1dc0a
3a8048d466019797f0b305c72892a3193ebc2a2f
320ee5344bc5fdc64be05ede19a85698cf31f5009473d2f600ae1cc3b5eee601
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/SurveyContainer.9c23aba3.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-cec3"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DASfQMfbZ%2FNkoHasM3TKqODpYTZE94xoJi2t6kGw6%2BntasX7LhAfpZUKm1LFztYF3rZyqcafwEvJaOabEuVhyFfe5D2bQc1QnIlOuVOGlWYG2vyYDOGRCSZVmVFLrmo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531158f5756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-8.webp
172.67.175.247200 OK 1.8 kB URL GET HTTP/3 zaineewa.top/img/comments/person-8.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-8.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1802
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MGMJEAVK2%2BDh%2F5LjeHQUYRdVJkjc3tiO%2FsvON5NyeuKy4LKS%2FdV1tBOEILG0EYLxq7teZMuHlNdH2hBK73ibpY4Cc8iOp%2FhpCyaUoB2hAF1XHtjsa%2BSIdmQg4GalyNk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117ea6c56a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-3.webp
172.67.175.247200 OK 982 B URL GET HTTP/3 zaineewa.top/img/comments/person-3.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-3.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 982
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pn6gSM8vY2CNJZzRnbyWDfzeUL%2FnLc2tp1Q1uumobJzasnLvpZ%2B8KR5jiGoz9g5f3bYVB%2FtmH%2FojMb8dGEe%2FGn914ETfzXzDF%2BL7gnTXek6klfQpQpgSqK1Nxa5%2BdCs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117ea7356a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-10.webp
172.67.175.247200 OK 2.2 kB URL GET HTTP/3 zaineewa.top/img/comments/person-10.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-10.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 2222
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AwGPRlJnpxZC8JKx%2BLFfIuDV9doxlA8vCQRjpFQDWYsIV4dPkAGrZCcHLHHHGHyeIxGkK4MAeo%2BNqtLh%2BH%2FbxZOjamMFtZjY23jHTyHPLHY9jM2GQwj6GEQliX%2BWY6w%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117ea8456a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/s-storageService.js.28f605b4.js
172.67.175.247200 OK 4.1 kB URL GET HTTP/3 zaineewa.top/js/s-storageService.js.28f605b4.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (2624), with no line terminators
Hash 45d18c40a4eb4014e490ac189aeb83ab
8a47894cce0d571c31809439a0b5ef01dd5422da
8a5fb86bfd332af56a2aa8778265fa87db6bf9f343ea2ced8617cf244af4bed4
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/s-storageService.js.28f605b4.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-a40"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6456
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=olBnD9ovrHsAxPXGzXKKkXjxBQmX7ryCLaOH45NiZq9BNwkIFYfSNtAZJx76KJ7pFbm31nbGZT9wK6esTbwEDMhsWYKCC1TILHCbVWJBIC6zhOstUmHuHCbXYiomKho%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113fd0c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
ocsp.sectigo.com/
104.18.15.101 471 B IP 104.18.15.101:0
Hash e9588e7d08a117ae1946619a975fe0ea
1e8a5b0320a69bd4cbbadc59fb043118bb147a19
bb6cb9f5ab1ca15aa181c254f99efd0bf9966997317e1a759309cc1eaa7ef440
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 26 Oct 2023 19:44:03 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 26 Oct 2023 05:19:50 GMT
Expires: Thu, 02 Nov 2023 05:19:49 GMT
Etag: "1e8a5b0320a69bd4cbbadc59fb043118bb147a19"
Cache-Control: max-age=552947,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 81c53117dc1f568b-OSL
zaineewa.top/js/v-redux-toolkit.esm.js.7f3423c8.js
172.67.175.247200 OK 8.6 kB URL GET HTTP/3 zaineewa.top/js/v-redux-toolkit.esm.js.7f3423c8.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (11320), with no line terminators
Hash 20d0370a129f98472a0b284bb528aa57
80463f43ec84c1c1b0989074c1c82a5baeff08d7
e8fb6d1dd672492e1d3ef1c01c25b40f453e54547ed59eaf30776479d60af05b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-redux-toolkit.esm.js.7f3423c8.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-2c38"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I9NCwn2Hed9fbDbiAttyZ07bJCS4ZKx1cfAfhSq8nTeXbLfFXXSkeG7RWvcq6SwE3fpUWwQQRyQdQknQMfSmJVmVZFSBcuJ0x2w01C2OyPSY0YbzJTLNM1i1pLa2Hhg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113fd1256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-11.webp
172.67.175.247200 OK 1.5 kB URL GET HTTP/3 zaineewa.top/img/comments/person-11.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-11.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1526
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: "653a5fe7-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vPAdVE5XGWGY0M2O9ZeBkgdhd8gv6UnqHgbO5kj79KoSP3chc%2BhQHMtgu4QSLb8apAB4pcDcuzNeHFwPcRZiYEHrpm3fi4E52qJXi3AxUdYjxpTWehEZGQSUmZwQOBU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531180ab456a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-domparser.js.22fbaac1.js
172.67.175.247200 OK 715 B URL GET HTTP/3 zaineewa.top/js/v-domparser.js.22fbaac1.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (1720), with no line terminators
Hash 0bede9a5c198192de1705c2fa157ad1b
9fe92b017015fd620a215d949d34fd6f42a57e16
99c8b42aa6ac355573395b2332b84ab3129c9618a7cbecc81840f6270c5da357
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-domparser.js.22fbaac1.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-6b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ukrc35cvGFPtN3eCHlbqWoxTchEBBy9fL040C3IPgiAJol%2FjGVOgLxPiO2iETzHQFoOxh1dgluB2OROC1Yas7XJzw8UbUnUVRYzB8ATg4mj%2F%2FuJd1tIdn4HOMxNRGts%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f1b56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
dortmark.net/sync-metrics
139.45.197.248200 OK 17 B URL POST HTTP/2 dortmark.net/sync-metrics
IP 139.45.197.248:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash 5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4
POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 725
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 6f0cc15bbf22b6733d08bb5ac1cf3427
access-control-allow-origin: https://zaineewa.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
zaineewa.top/rhd?rb=SczJrUXl519TW83XayjCDrEI5smp5GcQ5PZYvZRJAt--lglnDEDIvQHBD-Cy2EpFe31hoEDZgxqIm4069G6rZnanQ8GxDrAdnW7YpCalAaIdrXFF42ZGRd-Awn7KwXL_N9ZJuc9A4SqYjef0X2GI0hb3NSwI_druXM8WWVfbWgKyV44gvqG9D6U0jxBUhv5DQcjJQ6kLq3AI82oB&request_ab2=0&var_3=&var_4=&zoneid=6207682&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fzaineewa.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3Df0cfe0fd238a4fb0a34f24cfd5353629%26s%3D741493579312280258%26z%3D3956710%26var%3D6483597%26testinapp%26autoexit_86400%3D3953544%26utm_campaign%3D6483597%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=3956710&var_3=&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top&m=link
172.67.175.247200 OK 4.8 kB URL GET HTTP/3 zaineewa.top/rhd?rb=SczJrUXl519TW83XayjCDrEI5smp5GcQ5PZYvZRJAt--lglnDEDIvQHBD-Cy2EpFe31hoEDZgxqIm4069G6rZnanQ8GxDrAdnW7YpCalAaIdrXFF42ZGRd-Awn7KwXL_N9ZJuc9A4SqYjef0X2GI0hb3NSwI_druXM8WWVfbWgKyV44gvqG9D6U0jxBUhv5DQcjJQ6kLq3AI82oB&request_ab2=0&var_3=&var_4=&zoneid=6207682&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fzaineewa.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3Df0cfe0fd238a4fb0a34f24cfd5353629%26s%3D741493579312280258%26z%3D3956710%26var%3D6483597%26testinapp%26autoexit_86400%3D3953544%26utm_campaign%3D6483597%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=3956710&var_3=&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top&m=link
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type JSON data\012- , ASCII text, with very long lines (1960), with no line terminators
Hash 972bcaeb6ba492a6a7214ff1d404de0b
1ee67ea3b19f3edef8b672fce3df7a5ed50b4e7f
cf7abb1d03e28b57f728d441638be0f9e7e98693c315ba5a701e032cfa8027a3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rhd?rb=SczJrUXl519TW83XayjCDrEI5smp5GcQ5PZYvZRJAt--lglnDEDIvQHBD-Cy2EpFe31hoEDZgxqIm4069G6rZnanQ8GxDrAdnW7YpCalAaIdrXFF42ZGRd-Awn7KwXL_N9ZJuc9A4SqYjef0X2GI0hb3NSwI_druXM8WWVfbWgKyV44gvqG9D6U0jxBUhv5DQcjJQ6kLq3AI82oB&request_ab2=0&var_3=&var_4=&zoneid=6207682&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fzaineewa.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3Df0cfe0fd238a4fb0a34f24cfd5353629%26s%3D741493579312280258%26z%3D3956710%26var%3D6483597%26testinapp%26autoexit_86400%3D3953544%26utm_campaign%3D6483597%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=3956710&var_3=&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top&m=link HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629; prefetchAd_6207682=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:04 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 991c5c170cd8717dc683c02e59227a05
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:03 GMT; path=/; secure; SameSite=None
oaidts=1698349443; expires=Fri, 25 Oct 2024 19:44:03 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Nov 2023 19:44:03 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CvfqwFVGM97%2BZCnqWxK1YYwrsxpCKk9ICeQH%2B7R7ve6MuVvrvLj%2BHssLLrS3rb7KqqAhhoV4xqsCIrMzIFCWDpN5Hhxyg3EeeCsm%2BWMGtiOkqSF2SdOFcOSCi86Eo8U%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531183af256a2-OSL
alt-svc: h3=":443"; ma=86400
www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
142.250.74.35200 OK 189 kB URL GET HTTP/2 www.gstatic.com/recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js
IP 142.250.74.35:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint55:7F:79:64:ED:7A:04:50:63:54:9C:32:2A:AF:B7:95:17:D7:E0:33
ValidityThu, 28 Sep 2023 05:32:05 GMT - Thu, 21 Dec 2023 05:32:04 GMT
File type ASCII text, with very long lines (689)
Size 189 kB (188860 bytes)
Hash 4efc45f285352a5b252b651160e1ced9
c7ba19e7058ec22c8d0f7283ab6b722bb7a135d7
253627a82794506a7d660ee232c06a88d2eaafb6174532f8c390bb69ade6636a
GET /recaptcha/releases/vm_YDiq1BiI3a8zfbIPZjtF2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 188860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Oct 2023 18:54:15 GMT
expires: Tue, 22 Oct 2024 18:54:15 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2023 04:01:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 262189
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131 471 B IP 142.250.74.131:0
Hash 762489f21e64159610410f6912dae74b
486de8848e389dfea01157fb9dc03f270d665e27
18b5806e63a3b9836ec6007ba5d377aa1235f849c609207987c26b02bd4b9ed5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 26 Oct 2023 19:44:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zaineewa.top/sw/sw6163203.js?var=3956710&var_3=741493579312280258&var_4=null&ymid=6483597&ab2_ttl=5184000000
172.67.175.247200 OK 363 B URL GET HTTP/3 zaineewa.top/sw/sw6163203.js?var=3956710&var_3=741493579312280258&var_4=null&ymid=6483597&ab2_ttl=5184000000
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
Hash f03f1854e7a25db8ef104da2cb5dd6c9
a051c61cc351d2f827168c05fdab848239793a67
f56c649c2b85989cee615a7f8cc9c1b7efd0de1eb77bd5e78bbc2fa5cc3f821e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /sw/sw6163203.js?var=3956710&var_3=741493579312280258&var_4=null&ymid=6483597&ab2_ttl=5184000000 HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349444; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629; prefetchAd_6207682=true; prefetchAd_4292573=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:04 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-529"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7yH4NwQl0zL2Gr2kN4VUB8i8UCUl3O9ABR%2F%2FidZ3C3LErJWBZmwnDv7AL7B6z8SlNWkvrGieTIPJ6HHqpdZiwIxQSf1kWZ3SZUEg3SXmt1WsGSjRFNTcuAKwKKRixXo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c5311c683e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
139.45.195.8 43 B URL my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP 139.45.195.8:0
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:13 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:13 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
zaineewa.top/css/survey.13f714f9.css
172.67.175.247200 OK 68 kB URL GET HTTP/3 zaineewa.top/css/survey.13f714f9.css
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (36509)
Hash fb288f4a338ab73c054c26d5adb8969b
f32694ea126f4a2e73170b17dc52d65e9f4771fd
c59ea5c03af8d0c0a5a7f4da06482461271ad43cbd6d63faf0e323e535ffe40e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/survey.13f714f9.css HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: text/css
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-10ba8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6456
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mKYQ7Seo4dQTgDuRXl0jc937wQCJienLndQ8H0UEtlcjmRn9YEHFIa0El794H3dNUQPG8JBxonTZRAYtRYBTGQtsVwii5%2BqiVnLrN74KjWvAqHc5vbQ0fnbHr9095mk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531140d3a56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/favicon.ico
172.67.175.247200 OK 1.2 kB IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349444; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629; prefetchAd_6207682=true; prefetchAd_4292573=true
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:04 GMT
content-type: image/x-icon
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6526
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2B7v%2FJhOeHyli1aXe6QNf0tSUyK%2FT3SMSlNrVSaMDJRkrAg4CSFemUHLsK2uqVQr8GVs5%2FoBIn4%2BVSUfvfP71gsBucxQNItsKRH1N9atxbP9ooWdl0M9vxbTBEEts3I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c5311abe7256a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/_rtc.b4bcc48a.js
172.67.175.247200 OK 12 kB URL GET HTTP/3 zaineewa.top/js/_rtc.b4bcc48a.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (12222), with no line terminators
Hash 7885f3d91fd70b56a231976011a31146
7214d3f5273b6f1f0bc8fddd5e8ea906f614e9df
880bcf01f8cf339662db0112b916738048ebb4c2e9133bc8973c820cd937e0e9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_rtc.b4bcc48a.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-2fbe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=n9xqe1hkRixYRydk7SrZL4LjQjpW2TQJziq%2BwQRgFCQofbVfcGXoe59cDF9ZFE8Cw5OEfdxHEfsrgpkaC81cIzOsDNEFJcZvxJ%2BOncLMjFjeweu4M%2B34IUxudp%2BvJZc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113ecfc56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-immer.esm.mjs.9a69b4ea.js
172.67.175.247200 OK 10 kB URL GET HTTP/3 zaineewa.top/js/v-immer.esm.mjs.9a69b4ea.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (10499), with no line terminators
Hash 92d5c68c695c9ca3483585157a3f4a36
c650874d9d3d5f63f03f41474f8f3124216a9217
8946d9b83b394bf94e7d001fcd7e37ca21d53a3af872fc6624220c12bfd2f947
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-immer.esm.mjs.9a69b4ea.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-2903"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8yOYGV8T8UG9n6csyXgnZZjsuSqLANwh%2Fb4QnyM90mfwUsRZltKw5o8b4iNf%2F7u9pj6pFYCaZSyjgMUJk0UTJgNSa7TmJOMum1U1m0046BcxA2tebV93psQ0l1QRd7c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113fd2156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/5/6207682/?abt_opts=1&rhd=1&var=3956710&var_3=&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top
172.67.175.247200 OK 2.8 kB URL GET HTTP/3 zaineewa.top/5/6207682/?abt_opts=1&rhd=1&var=3956710&var_3=&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3003), with no line terminators
Hash 5f607586439e9edfe3b0397a956a35b0
0c942ad8a6e5e94cf9c0dc698eebd312f3aed233
1e8f155963146c8763f0d26d1797848ec9cf625842b085da2c1b4f406660eab9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/6207682/?abt_opts=1&rhd=1&var=3956710&var_3=&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: ac49642b4f7196118aab29502c997ae3
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:03 GMT; path=/; secure; SameSite=None
oaidts=1698349443; expires=Fri, 25 Oct 2024 19:44:03 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Nov 2023 19:44:03 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kUGcKvysCCwJ6Y7FLJn2BTuSfvvYUKH34ti98ePV4Uu3SmvyKuth6A41Q5FXKMilVRPpDwwMi03X8lhR8VB4PX%2BLYyQE84d0tv8OjIvDKioqRz4niRWt%2FRMfQ7w%2Fzbw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53115efc856a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
172.67.175.247200 OK 7.2 kB URL User Request GET HTTP/2 zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
IP 172.67.175.247:443
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (7475), with no line terminators
Hash 4d50a77c28b294f9a5c6fdf7df096123
93ffdb23fbf1c4b78ac5ec4fa11842a12a8a5cc9
aabf9509e32d47aa19c78148c57712188cf02c11369a098b4394b057c36a1555
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544 HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 26 Oct 2023 19:44:02 GMT
content-type: text/html
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=V0%2Bn5KgZ1Yxs1yhT3FPZxSynWkCMTb2bVIpSekCXDBre9qLseAZ2cm5iISNJJ8%2FpGM%2B%2FDRRSyghzWFq6yJlk7RIdArZNAbbFfWoyResn0a8YPe2x1FKJu5BZSK%2FFBn0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531120ec956ba-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
zaineewa.top/js/_core-survey.33c8a80d.js
172.67.175.247200 OK 157 kB URL GET HTTP/3 zaineewa.top/js/_core-survey.33c8a80d.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
Size 157 kB (156801 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_core-survey.33c8a80d.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-26481"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m4r%2BwuA9v%2FUhXTEshduoDNfah%2BwAtc05PY4F8nIlQlvZ1I%2BaYamMS%2Bm%2FZ7YLYKgGnMpnFUqO3O6nvcVI3CiKrb77k%2Fsm4oRZ8YLnWM%2BUN5avczmgmff%2FWJQzUiOq4yM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531140d3456a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/img/comments/person-5.webp
172.67.175.247200 OK 1.8 kB URL GET HTTP/3 zaineewa.top/img/comments/person-5.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-5.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1846
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kTULkx8rZ5WQ1n37OjziQNUcBW4opPi8WVRJBCH9Ubj9%2BCi%2BnCJnatQ5cAFSuC1N3Sa%2B8GI%2Fo7WH%2FpWzwxNv%2FyggkwCsxVOLCYxyDlwy3CSPOhWV6iuiz1SdXqMrZCo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117da6456a2-OSL
alt-svc: h3=":443"; ma=86400
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
37.48.68.71200 OK 12 B URL POST HTTP/1.1 datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP 37.48.68.71:443
ASN #60781 LeaseWeb Netherlands B.V.
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with no line terminators
Hash 6949f52318584a4b51c719a9b84a7287
9fbd870c6afd4bdd6fbbd87f52df2c81dd23e905
72603096ec3515dbc615ab8837fd1b15e91ee827bc7af41d71c9882b08699375
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1546
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 26 Oct 2023 19:44:03 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://zaineewa.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
zaineewa.top/img/comments/person-12.webp
172.67.175.247200 OK 1.4 kB URL GET HTTP/3 zaineewa.top/img/comments/person-12.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-12.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1390
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mDtz6eQf4z%2B6QCQBPURowd9WdemDFNqLthr2Mi%2BsmaSK%2FpHeNRiQIIk3W7HCo4eIpWqRIHURrGGdPsVmNaDj0lZw6M2xkp3QTwYnBl0uF9dq6W115Zp%2B7rhUNjUp7RU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531181abe56a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/config/sd/sd-1916-en.js?v=10
172.67.175.247200 OK 7.4 kB URL GET HTTP/3 zaineewa.top/js/config/sd/sd-1916-en.js?v=10
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (7814), with no line terminators
Hash 19902a83953824ace00af92d134a9ba6
8af98219c1670def692840d0b4a93fc4bea5270d
3f2ad890c9531788d39864a8471af1c3a2eb08732e65b06f0c3c61c808f4a18e
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/sd/sd-1916-en.js?v=10 HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-1d06"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6799
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OBF6kWzPSfDYXSm9OTPNnNY0nvdobQpcmMBuYUL6KrMBLBiexOQEeLlbXsNouOVwdYFwjCCi2sXyzR%2B9M9FrR8PMaZahNrNKxDWdENMW8x7GRp2v6WKwJtyqps9SMpw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53114de3e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/5/4292573/?abt_opts=1&rhd=1&var=3956710&var_3=741493579312280258&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top
172.67.175.247200 OK 2.8 kB URL GET HTTP/3 zaineewa.top/5/4292573/?abt_opts=1&rhd=1&var=3956710&var_3=741493579312280258&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type troff or preprocessor input, ASCII text, with very long lines (3051), with no line terminators
Hash f9d1a06dc150aae4cfdfc62205a9665c
ab88ad40c5ba891dc787c55bdb882c56b26088fa
16a15302cdeb86e2ce83c94728eb37203367d90aa34d2b12a723e1c8cf880fbe
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /5/4292573/?abt_opts=1&rhd=1&var=3956710&var_3=741493579312280258&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629; prefetchAd_6207682=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:04 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 77a0963a86afd83994530013877bc742
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:04 GMT; path=/; secure; SameSite=None
oaidts=1698349444; expires=Fri, 25 Oct 2024 19:44:04 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Nov 2023 19:44:04 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7E9fOMDtC6vPk57Zv7%2BX2Oy3qumbP6Szp4dOKw%2Be3jjr%2FAfVleot6lL7xdNdSjFjCWhLOVdEM%2BPcip9yNmDo5EBZp05k51qq1fvQ2ypJFblYz%2FecKhJ2zXZP0SFWdDY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531194c6c56a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/_each-land-config.d76fde33.js
172.67.175.247200 OK 60 kB URL GET HTTP/3 zaineewa.top/js/_each-land-config.d76fde33.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (60060)
Hash 9da2d82e09e2c1e2a20bd8641930dcfe
62930af9f95c29c4a55096f49969ab5d51cc3047
a762b96d844379b2b9b9a365408d0dc56207d169888fba2e946ec4d8352e9db8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_each-land-config.d76fde33.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-eaf0"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IOx7UkyzT3EYb%2BBc9ezzs8Go1b1TsTGg9%2FZQ%2BLE%2FjG2M9195z60CpuKBiuHJQqnLHtHSvXgYG4C4v5kMRNWuIWTTRUl4OvCXtTsmIuygX%2Ft8rPjv6EeCtkkuxR4UB4c%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113fd2556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-react-dom.production.min.js.1769e0c0.js
172.67.175.247200 OK 129 kB URL GET HTTP/3 zaineewa.top/js/v-react-dom.production.min.js.1769e0c0.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (65440)
Size 129 kB (129359 bytes)
Hash 5c4c7547ffe7d28a1889a4c34a0a6cd7
26bb01c286bf210fcf54c75c262538ddd3017de4
46d7c681553f597021dd7678745e853f88733a2a20afcd4aea8621b3a41cfd96
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-react-dom.production.min.js.1769e0c0.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1f94f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zkK7g%2BAtBUjH2rgy%2Bx0dCA8HR0TpAOztRMKWcHV4cpoN4TQvnQuhJa7OEtRnSGIIEEuo4qA%2BwJlRkRz1LFa2wObz7P3C19bFgnksBuq2qxh75VIRrgS6Fgf0qYVHBkI%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113fd2e56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-utilities.js.87af613f.js
172.67.175.247200 OK 2.6 kB URL GET HTTP/3 zaineewa.top/js/v-utilities.js.87af613f.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (2645), with no line terminators
Hash abec403b7b33ca38aeea0fc4d0d70a9a
b608145aafcaffd8b4ac15e7f994dec8983be254
8c10a114c0d664a927f5358ddb3eca9d886ca1cf535a69d9313b7ddd8d2d861b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-utilities.js.87af613f.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-a11"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4AoQdqBodBFaI%2BTc8w3eKwXD1vllSvkn2AsLZPgrDQKLfTyexfmMwBbLW9J5QfOnBX2647oMozJwdekiKe%2F9FVFTurwOIRqOMfxm12LwSvLmCHn0on18Ic%2FQjC9xsdg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f1956a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
www.google.com/recaptcha/api.js?render=explicit&hl=en
142.250.74.132200 OK 852 B URL GET HTTP/2 www.google.com/recaptcha/api.js?render=explicit&hl=en
IP 142.250.74.132:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint3D:4A:6B:FD:30:97:01:E9:C1:38:5F:67:2B:A6:A3:43:7B:2E:72:45
ValidityThu, 28 Sep 2023 05:32:37 GMT - Thu, 21 Dec 2023 05:32:36 GMT
File type ASCII text, with very long lines (852), with no line terminators
Hash 9cd0d8a0d4b4590be9be14fd3a0a4d93
c7b33101b23515f6ce4cf6fba5a9cfe36637454f
4eab24765a52a664cb6659cc7a688a056e58544bb670983943b62e033aa9bbc0
GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
expires: Thu, 26 Oct 2023 19:44:03 GMT
date: Thu, 26 Oct 2023 19:44:03 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zaineewa.top/img/icon-survey.svg
172.67.175.247200 OK 2.7 kB URL GET HTTP/3 zaineewa.top/img/icon-survey.svg
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2690), with no line terminators
Hash a000ba4d0e7570d810feafb22bc50bef
af8fce44a683d3dfebe69cbe856e747739c9a666
9ae848c180201d8ae5c59ce118b0b7ef395a01295fb04d57e81cfe0566100679
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/icon-survey.svg HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/svg+xml
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6456
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hD0zzd80%2FHhz4ahU3Cc1RGacUIc1mDou5e3kzXKYPo0s5JybPkXZGUC90Ip3Lo1AiYYlYSWzx5PkEgr8%2BSUuB7cIa5V1rKBNQvEshaR399w%2Bb65Vj3a7qLqooLbBXSM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531140d3c56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-dom-to-react.js.428d2e15.js
172.67.175.247200 OK 1.1 kB URL GET HTTP/3 zaineewa.top/js/v-dom-to-react.js.428d2e15.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (1101), with no line terminators
Hash 6026bb5401d27988f3bdcfee3fba2043
05621f7aa4b9592a6b5a6ffa19b27259c5eb0fe6
7c64d40941a9f40204e8986edeb8b37d30be6b4ee193cd51c6d7d5fbe7530eba
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-dom-to-react.js.428d2e15.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-43d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1qV4EW6gno%2FiTgSDexfvPid83JjvPK%2BElHfxhobSIk%2Fnz33pMauV4PWdPqFbZOzorGwxoe%2BbcgxSUE5S3uUwj0qh3M%2FGiB5BZ%2BJ53zfCd4gB3YxBS9I0rnfeSZq37QU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f2556a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
offpichuan.com/rotate?zz=4292525;4326645;5128285;4949467;5381239;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=6483597&uid=f0cfe0fd238a4fb0a34f24cfd5353629
139.45.197.237200 OK 4.7 kB URL GET HTTP/2 offpichuan.com/rotate?zz=4292525;4326645;5128285;4949467;5381239;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=6483597&uid=f0cfe0fd238a4fb0a34f24cfd5353629
IP 139.45.197.237:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectoffpichuan.com
Fingerprint23:6C:06:58:D1:E8:4C:43:C9:36:79:DD:E0:BD:B8:81:CE:A1:8E:10
ValidityTue, 12 Sep 2023 00:50:47 GMT - Mon, 11 Dec 2023 00:50:46 GMT
File type troff or preprocessor input, ASCII text, with very long lines (4709), with no line terminators
Hash 6edec8ee50bf87ec0a4b9dca3a5f67ed
b846e168c57718eda45676bdc4d01e75de4810c4
d721acf99ac9ad1d86f690195e063824230a4f430eac8f5805649cdbc2a55c49
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rotate?zz=4292525;4326645;5128285;4949467;5381239;5381316;5381339;5381332;5381307;5381330&var=3956710&ymid=6483597&uid=f0cfe0fd238a4fb0a34f24cfd5353629 HTTP/1.1
Host: offpichuan.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://zaineewa.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 26 Oct 2023 19:44:04 GMT
content-type: application/javascript
x-trace-id: 259ab9b66405cac163734c44514020e3
expires: Tue, 11 Jan 1994 10:00:00 GMT
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
pragma: no-cache
vary: Origin
access-control-allow-origin: https://zaineewa.top
access-control-expose-headers: Link
access-control-allow-credentials: true
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
set-cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:04 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
X-Firefox-Spdy: h2
zaineewa.top/img/comments/person-9.webp
172.67.175.247200 OK 1.7 kB URL GET HTTP/3 zaineewa.top/img/comments/person-9.webp
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /img/comments/person-9.webp HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349443; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: image/webp
content-length: 1654
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: "653a5fe6-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2001
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qpJ8tYlJASqJ1%2FSBv3HbNr%2Brcy3liUA%2FI07bjGbvp3nhTQRMIImwVNN0%2FEIP8b0je7SeaPQg%2B%2Fsb882i9iRETpYTf%2BZ9ePDTZK9Hmnc9fZrgQNYlYEA72dRj1Gt5AYo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53117ea7f56a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-possibleStandardNamesOptimized.js.a40daacf.js
172.67.175.247200 OK 7.6 kB URL GET HTTP/3 zaineewa.top/js/v-possibleStandardNamesOptimized.js.a40daacf.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (7923), with no line terminators
Hash c85d72c54bde00b89ae995fc05fdbbc5
c5b2353ae98c2b6e3e13903b0a933cd5a05eba4d
f213c99b5a413aa0e270758702396247b2346dea050d2d641b59619743af6bca
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-possibleStandardNamesOptimized.js.a40daacf.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1d99"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0RLs17%2Bl8nuFz%2F8rY0D10yd%2BYvU6yTXQClmBrTzXA7oRveBJh8nBxamJIbNkmayBIjxpnYDzRnuoFnu9JgJ75O5%2BSCJVanVK3oOY4M5t%2FL%2Bv6AGH7c1FpCf1n4xyNdc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f1756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-index.mjs.f94704a2.js
172.67.175.247200 OK 35 kB URL GET HTTP/3 zaineewa.top/js/v-index.mjs.f94704a2.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (35287), with no line terminators
Hash 90fddde810a555d793ce11a8300c1ccf
b3e43913b63c72998e988e7b7392e2125492191f
0063db5a9711ca0a23f234294c720ff15cc7705b382b530dc09b7e2e9c8a3430
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-index.mjs.f94704a2.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-89d7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gjcBikjeV8fh7%2FHpCSUXQGOQiJ1%2Bz%2FkV5EuN68t9QTF0JEL1ab1Q%2BOicTrTtbmJo%2B%2B5GPF4yTIxNslh2MTotBMZS12nBG8j%2FI2Yc5xYO3O6J9qSYFokoIC5QceM%2FiQ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f1156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-node.js.d0dda615.js
172.67.175.247200 OK 6.3 kB URL GET HTTP/3 zaineewa.top/js/v-node.js.d0dda615.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type troff or preprocessor input, ASCII text, with very long lines (6337), with no line terminators
Hash bffd29f5ad49a4ff3cb5e508eea9e50b
c96996da407993a48a0aa5b9508c4d147bd0ae77
6a3e07c425be24b355244e4c04117258314da629d65e6974db9add14b92d11e8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-node.js.d0dda615.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-186b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2002
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aBg3VlK8yuGja9CPK0jkAH1t0E4vdAjHS0sbvWjl%2FkM5VxM%2BSrym9%2FKLKoF%2F2Bc%2B8iwbOiQP%2BdHuB2YQSljKdhhJXFx2OBxoXNd1vJt186b7%2ByetXTi8s3WViVCfhi0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531157f1356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/v-index.js.0fa1829c.js
172.67.175.247200 OK 41 kB URL GET HTTP/3 zaineewa.top/js/v-index.js.0fa1829c.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (40921)
Hash 85d1bcb76d33d00e7280659a79ad97eb
e708d6d94617d9d20970f234811a77dd597e3f3c
0f5f3e84792501d1f90f397c4f412144be23f76695ff1eb927d6824b62a84fb7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/v-index.js.0fa1829c.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-a026"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KGPdFO9sPZBNoJDJl96iD9v3JzECETlWLLaes93cxmhtjMWF6jTtJqsIPgmfonP%2BM5%2BrP%2Bzi3FRL5L9Wt06%2BzkdkvnbCGay2%2F9suZ8vPrfcNMLmJPQwQ%2FqPfQZTZknc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113fcff56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=3956710&var_3=741493579312280258&var_4=null&ymid=6483597&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
172.67.175.247200 OK 27 kB URL GET HTTP/3 zaineewa.top/pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=3956710&var_3=741493579312280258&var_4=null&ymid=6483597&cdn=1&domain=laugoust.com&ab2_ttl=5184000000
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (26953), with no line terminators
Hash 7cfed967ba7094f80855e9c7850f359e
f0acba47cbaae0bf415996d43fdde90f109f1cff
8f13eabfe1290926119e6421d35719e33ef68384b295eaee367923d75de2dc17
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/micro.tag.min.js?z=6163203&sw=/sw/sw6163203.js&var=3956710&var_3=741493579312280258&var_4=null&ymid=6483597&cdn=1&domain=laugoust.com&ab2_ttl=5184000000 HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-6949"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lf0XUhri4UOjdmV8DjAExnjeSDpUFBp5yuzPY8CT1K%2F%2BE5f6ROMhpjugu9ai6ncty4A%2F0KEzp0bb%2BRcAmnMKt6rP8MA2g9%2F%2Fe1qjFI1oFONyK5zBrjOyH0ww2Pgb2Zg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531156efa56a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/pfe/current/stattag.js
172.67.175.247200 OK 19 kB URL GET HTTP/3 zaineewa.top/pfe/current/stattag.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (19024), with no line terminators
Hash eee0fa1cefab154ab482da73fe023bee
1d3c88baee1b8527a30190d694cc8c6378b7f3bc
333132f2f62e5bcef5ab8a1950e7a8342023c0cea68b563b1130bea16dd0bc6a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pfe/current/stattag.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-4a50"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6423
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c0v4wntCgeH2cCD5C4KICRe8Qc2sFKWiajxcNMl6cFLxai1Er8kuztRf7X3xHuZFQuttcxsB3P44rDd71NOChyvZ0oBCC8Y%2B74JeR3vbuJfEHDupyEv29wyeAv4HUkk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531156f0156a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/rhd?rb=kp-QkkA-iKuMgaLFlJekJwSqpL2KIiMWZvx8ByOhTUQmhltNcsSvdPKmB_Wo_s8mTglRrVddlUJfKOkJnaQD6BxrL7FB7SyALml7qaKBwPFrohltx5SE5_8V3VOI27tC0_xX3Kl9PBliO7LfQEXt2YKZ0az1_7LXWwekqcHYNZ1HrsoCNVuKlS50ZbpZfa77AiVw1YeG6gz0saHbWYN6cMEkhrRQkSxCm8X8H6keO2s%3D&request_ab2=0&var_3=741493579312280258&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fzaineewa.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3Df0cfe0fd238a4fb0a34f24cfd5353629%26s%3D741493579312280258%26z%3D3956710%26var%3D6483597%26testinapp%26autoexit_86400%3D3953544%26utm_campaign%3D6483597%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=3956710&var_3=741493579312280258&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top&m=link
172.67.175.247200 OK 2.1 kB URL GET HTTP/3 zaineewa.top/rhd?rb=kp-QkkA-iKuMgaLFlJekJwSqpL2KIiMWZvx8ByOhTUQmhltNcsSvdPKmB_Wo_s8mTglRrVddlUJfKOkJnaQD6BxrL7FB7SyALml7qaKBwPFrohltx5SE5_8V3VOI27tC0_xX3Kl9PBliO7LfQEXt2YKZ0az1_7LXWwekqcHYNZ1HrsoCNVuKlS50ZbpZfa77AiVw1YeG6gz0saHbWYN6cMEkhrRQkSxCm8X8H6keO2s%3D&request_ab2=0&var_3=741493579312280258&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fzaineewa.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3Df0cfe0fd238a4fb0a34f24cfd5353629%26s%3D741493579312280258%26z%3D3956710%26var%3D6483597%26testinapp%26autoexit_86400%3D3953544%26utm_campaign%3D6483597%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=3956710&var_3=741493579312280258&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top&m=link
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type troff or preprocessor input, ASCII text, with very long lines (2114), with no line terminators
Hash e27dd2a3410af44cc0ae969586e94111
cdd94c277bcc5da396609b7ef7f9e2d2c7eaeaa9
49f15ec23d90eb04fe7fb88f67365e844e9db28b9e14b78c54a2d8bcf25371ea
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /rhd?rb=kp-QkkA-iKuMgaLFlJekJwSqpL2KIiMWZvx8ByOhTUQmhltNcsSvdPKmB_Wo_s8mTglRrVddlUJfKOkJnaQD6BxrL7FB7SyALml7qaKBwPFrohltx5SE5_8V3VOI27tC0_xX3Kl9PBliO7LfQEXt2YKZ0az1_7LXWwekqcHYNZ1HrsoCNVuKlS50ZbpZfa77AiVw1YeG6gz0saHbWYN6cMEkhrRQkSxCm8X8H6keO2s%3D&request_ab2=0&var_3=741493579312280258&var_4=&zoneid=4292573&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1280&wh=1024&cw=1280&wih=1024&wiw=1280&wfc=0&pl=https%3A%2F%2Fzaineewa.top%2Fsurvey.html%3Foffer_id%3D1916%26geo%3DNO%26oaid%3Df0cfe0fd238a4fb0a34f24cfd5353629%26s%3D741493579312280258%26z%3D3956710%26var%3D6483597%26testinapp%26autoexit_86400%3D3953544%26utm_campaign%3D6483597%26utm_medium%3D3956710%26utm_content%3Dzd_public_v2&drf=&np=1&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-unknown&rhd=1&var=3956710&var_3=741493579312280258&var_4=&ymid=6483597&s=741493579312280258&ab2r=&os_version=&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&domain_onclick=https%3A%2F%2Fzaineewa.top&m=link HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; oaidts=1698349444; syncedCookie=true; ID=f0cfe0fd238a4fb0a34f24cfd5353629; prefetchAd_6207682=true; prefetchAd_4292573=true
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:04 GMT
content-type: application/json
vary: Accept-Encoding
x-trace-id: 53f11fe0e31af9b3d8e53558fec0c5b7
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Wow64
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
access-control-max-age: 86400
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
timing-allow-origin: *
set-cookie: OAID=f0cfe0fd238a4fb0a34f24cfd5353629; expires=Fri, 25 Oct 2024 19:44:04 GMT; path=/; secure; SameSite=None
oaidts=1698349444; expires=Fri, 25 Oct 2024 19:44:04 GMT; path=/; secure; SameSite=None
syncedCookie=true; expires=Thu, 02 Nov 2023 19:44:04 GMT; path=/; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
content-encoding: br
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8CEG1HFyyWk6EuCu7FivQCeApr9uoG5kd1aF%2FI%2BSlzrKpVhKmUuAfo2XFtZxgtlUPUbFjq3uuQzWJ1Hw6CE5eJPREjR1aDYKcMkGuQllmdYsNs%2FbYWH9DcSNFXkGcxM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53119bd0156a2-OSL
alt-svc: h3=":443"; ma=86400
zaineewa.top/scripts/prefetcher.js
172.67.175.247200 OK 11 kB URL GET HTTP/3 zaineewa.top/scripts/prefetcher.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (10761), with no line terminators
Hash b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /scripts/prefetcher.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-2a09"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6528
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2FC%2BW0IQRxV1l06hG8N8GdU7VwghO8ftIFGJHh%2F8rOTro7W1e2xHHc5N8tB6MBmGu2Yx0hdQXBnXg06t2xw10NF3HdiYTrtlQFTXH%2ByfBELk94ulwQGUXLiiois5vRo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531148dc056a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/survey.f8b42bb7.js
172.67.175.247200 OK 6.6 kB URL GET HTTP/3 zaineewa.top/js/survey.f8b42bb7.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (6757), with no line terminators
Hash 1a846b0b46df6dbb8ea69675d8c57158
a37ccbeb542e5241a598d11375bdaaa38d25dc88
59be9fb386a65f2c2d1131633abc195d0616cdf05b366c91ba813ffbfb7e15f3
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/survey.f8b42bb7.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-1997"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 2005
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SMLYGwyFw88XfO%2BbRm7OLm%2F6UViFTmkGMekgLfnHNDhGaF9YMt2IlTMNBpz8Uo4Qpwio8UNV%2FmGF5nE3%2FqEvg7EKuhFiEWK6YKll8IwBpOZh9kq7DwhDQU0T%2FllRSS0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531140d3656a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/_prefetcher.be7b27ba.js
172.67.175.247200 OK 2.3 kB URL GET HTTP/3 zaineewa.top/js/_prefetcher.be7b27ba.js
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with very long lines (2407), with no line terminators
Hash ff29b450f26b26525e4f7b71e61917f9
4302649f9b4333871d9c920c539cfc81f5d00fb4
276f4cde911d0c6c7d1a7a6e23a6aad73632e6eed2c48b3329cf1ce7694c6d8c
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/_prefetcher.be7b27ba.js HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/javascript
last-modified: Thu, 26 Oct 2023 12:47:33 GMT
vary: Accept-Encoding
etag: W/"653a5fe5-929"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 6529
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1IEzXLT1ZVmnm2nGgFpKf3Z%2Fr7WLDuNmoTBdNJ%2BqIU2RBqyJgeUeqC1hvO864GRkOmfh%2FfKvIFcARC%2F%2F9Xjm7u%2BQpYBmIki%2FsIcIVL43GOpb7Ltqzb7Uy5QF7UWImRk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c53113ecf856a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/css/_core-survey.626be79c.css
172.67.175.247200 OK 130 B URL GET HTTP/3 zaineewa.top/css/_core-survey.626be79c.css
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type ASCII text, with no line terminators
Hash a55f9fbe2337d1c538f9f25b1b29c8f4
23e6ec134ac3f27176afa02ccaf9302a654955db
43e1b300d47475ea5462282492809a844cc67d8ca60d84f0c4d98a3783d96bc2
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /css/_core-survey.626be79c.css HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: text/css
last-modified: Thu, 26 Oct 2023 12:47:34 GMT
vary: Accept-Encoding
etag: W/"653a5fe6-82"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: HIT
age: 3963
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F%2BUvqVkfbMWR5X%2B3UZ%2F0%2BgtX%2F5u%2BOOD4nmpPnbj0d7ecyoPlaJ%2BbyOsdnA0uTld8jtFRS5e8HGLG2ESRP6XWOqMZr6gosvBdSwAgz72TMW%2FU0GEQpPkwdGIPFab%2F0Dk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531140d3756a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
zaineewa.top/js/config/dict/cookie-consent-1.json?v=10
172.67.175.247200 OK 6.8 kB URL GET HTTP/3 zaineewa.top/js/config/dict/cookie-consent-1.json?v=10
IP 172.67.175.247:443
Requested by https://zaineewa.top/survey.html?offer_id=1916&geo=NO&oaid=f0cfe0fd238a4fb0a34f24cfd5353629&s=741493579312280258&z=3956710&var=6483597&testinapp&autoexit_86400=3953544
Certificate IssuerLet's Encrypt
Subjectzaineewa.top
Fingerprint33:43:74:1A:DA:6A:33:F8:20:4E:92:86:96:F2:53:A9:7E:FB:1F:82
ValiditySat, 14 Oct 2023 10:30:51 GMT - Fri, 12 Jan 2024 10:30:50 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Hash 4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: zaineewa.top
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 26 Oct 2023 19:44:03 GMT
content-type: application/json
last-modified: Thu, 26 Oct 2023 12:47:35 GMT
vary: Accept-Encoding
etag: W/"653a5fe7-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OMrZ%2BqunJWgBWNMnzVwLAScjNPMgYusCac0Aa4t39%2BoaOpTI1hlI06hI3BVjd1DM%2BwButNr7RVEFZGsL1v3KGZ49S5cwnC8TVtsOJipSdmrid5bqz%2FUs53RYMrF3M%2FQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 81c531155ef356a2-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400