Report - ltj.soapauth.top/finance-survey.html

Report Overview

Visited public
2023-12-11 08:12:43
Tags
URL
ltj.soapauth.top/finance-survey.html
Finishing URL
ltj.soapauth.top/finance-survey.html&utm_content=zd_public_v2
IP / ASN
172.67.186.59
#13335 CLOUDFLARENET
Title
Would You Make A Great Career Online And Become A Millionaire By 2023?

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dortmark.net	unknown	2023-04-06	2023-04-11 18:40:39	2023-12-10 05:13:33	2.9 kB	4.2 kB	139.45.197.248
ltj.soapauth.top	unknown	unknown	No data	No data	22 kB	584 kB	104.21.80.152
www.gstatic.com	unknown	2008-02-11	2016-07-26 11:37:06	2023-12-10 05:58:01	458 B	206 kB	142.250.74.35
datatechonert.com	46154	2021-12-24	2021-12-24 17:44:17	2023-12-10 19:04:34	510 B	484 B	37.48.68.71
www.google.com	7	1997-09-15	2015-05-10 13:11:19	2023-12-09 10:58:51	406 B	1.3 kB	142.250.74.132
my.rtmark.net	9054	2014-10-29	2015-02-04 10:54:57	2023-12-10 17:58:57	942 B	1.4 kB	139.45.195.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-12-11 08:12:16	medium	Client IP	Internal IP	ET DNS Query to a *.top domain - Likely Hostile

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-12-11	medium	dortmark.net	Sinkholed
2023-12-11	medium	dortmark.net	Sinkholed
2023-12-11	medium	dortmark.net	Sinkholed
2023-12-11	medium	dortmark.net	Sinkholed
2023-12-11	medium	dortmark.net	Sinkholed
2023-12-11	medium	datatechonert.com	Sinkholed
2023-12-11	medium	dortmark.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (32)

	URL	From	Size	First Seen	Last Seen
	ltj.soapauth.top/finance-survey.html	ScriptElement	135 B	2023-11-23	2024-10-28
Pretty URL ltj.soapauth.top/finance-survey.html IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-23 13:28 Last Seen2024-10-28 13:21 Times Seen22536 Hash 2a09c62ade9bdbd73d5b821d7eb7224a c6a062a7229c27cc653a472936a4233f53378601 7b6f6684bffd8b9b04937cd8fa05b0e46e6b92f65b8695df8dd4265e52b8cd55 Loading...

	ltj.soapauth.top/js/s-checkSessionStorageAvailable.ts.42cc21e7.js	ScriptElement	330 B	2023-11-30	2024-08-20
Pretty URL ltj.soapauth.top/js/s-checkSessionStorageAvailable.ts.42cc21e7.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2024-08-20 17:22 Times Seen194 Hash 097280d083dfcaac0b20a3752c71ed99 9e24c2dd7a0219ec327baef9d3bb144e2229121c b27e5190a829f6c424190da4501688c981156ef5f3711914a653c8a4328ec052 Loading...

	ltj.soapauth.top/js/v-redux-toolkit.esm.js.1cbc70bc.js	ScriptElement	11 kB	2023-11-30	2023-12-13
Pretty URL ltj.soapauth.top/js/v-redux-toolkit.esm.js.1cbc70bc.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2023-12-13 02:33 Times Seen195 Hash 8238073807a61f3f047f3a080389e7b0 043568860166b46e6da8dc636fbe0fc37025fb4b f799eed81096e02f82c2816a45ef960daa43eb7250e56cdf5db69d634cb0fe07 Loading...

	ltj.soapauth.top/js/v-dom-to-react.js.043ec07e.js	ScriptElement	1.1 kB	2023-12-07	2024-08-20
Pretty URL ltj.soapauth.top/js/v-dom-to-react.js.043ec07e.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2024-08-20 16:27 Times Seen188 Hash 5996d58ed16f5b9c112366d813267675 c3dfa6acf6b7ae6ee9f90bac0c79bd7d35d747b7 553dc04e006ad66545ffc7b8e53f5f3ada7a534253563fd8a6bbdd79c07a3c49 Loading...

	ltj.soapauth.top/js/v-node.js.a99fd0e8.js	ScriptElement	6.3 kB	2023-11-16	2024-08-20
Pretty URL ltj.soapauth.top/js/v-node.js.a99fd0e8.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-16 14:34 Last Seen2024-08-20 19:17 Times Seen601 Hash 904cafc4bae09ed5fd089ff78fdef84a d0550f2acd79b0f9bbfd39d64766c96141e594b2 b61b5e77d8a1026156df1b4de705f28e5f75d41069155011b30ee404d6598f74 Loading...

	ltj.soapauth.top/js/v-possibleStandardNamesOptimized.js.b6b6d3d0.js	ScriptElement	7.6 kB	2023-12-07	2023-12-13
Pretty URL ltj.soapauth.top/js/v-possibleStandardNamesOptimized.js.b6b6d3d0.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2023-12-13 02:33 Times Seen188 Hash ae641935263424d7ed2498587c3d90fe acbda4683e534500b90857d02b259d3f4231889e 3c428525609cab8396f707598d5772235ee1b2bbeab2edbed4048a854e6634ca Loading...

	ltj.soapauth.top/finance-survey.html	ScriptElement	1.6 kB	2023-12-08	2024-08-20
Pretty URL ltj.soapauth.top/finance-survey.html IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-08 14:49 Last Seen2024-08-20 16:22 Times Seen159 Hash 18b2e77ba20771df2685039da8911b79 c6e771a5367af3aa1ea9aa47b7312c9d532d1aa3 cd81494c1a3f0695864c8e6b4b2970592c45e277dc01c29ad3c29edebe7f7c0a Loading...

	ltj.soapauth.top/js/v-index.js.62b8985c.js	ScriptElement	41 kB	2023-12-07	2023-12-12
Pretty URL ltj.soapauth.top/js/v-index.js.62b8985c.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2023-12-12 23:35 Times Seen45 Hash ee4b57cd28ecfd9347721d234a0824b5 646887572fad9ebb8a6935d7640d14958fd7160c f1fc58f4984aeec5ec67cd9e1325af671f4c5f1e944741056a86c5427cc6f184 Loading...

	ltj.soapauth.top/js/s-checkLocalStorageAvailable.ts.127e6df5.js	ScriptElement	330 B	2023-11-30	2024-08-20
Pretty URL ltj.soapauth.top/js/s-checkLocalStorageAvailable.ts.127e6df5.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2024-08-20 17:22 Times Seen194 Hash e04c66a035c7b937bf4196fa9ddefb1a 63366d1ccc3a677c961a067c6ca4b22417956cab e369cc05b4723ffdc69a339db6f5a84390c36eac6cee0b257b97a63328c81311 Loading...

	ltj.soapauth.top/js/_core-survey.37b49ebd.js	ScriptElement	171 kB	2023-12-08	2024-08-20
Pretty URL ltj.soapauth.top/js/_core-survey.37b49ebd.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 17:02 Last Seen2024-08-20 16:21 Times Seen43 Hash 27b8bde99ea2a8fb94e1c95d8231ea52 6fb32b1e301ec7afaf8b63cbca5bc9dd580e51e6 bcb4b0a9bbdf73a179828ca56e6217547b2a1a54510a17acd99f6f98d73e13a4 Loading...

	ltj.soapauth.top/js/v-utilities.js.db83c80e.js	ScriptElement	2.6 kB	2023-12-07	2024-08-20
Pretty URL ltj.soapauth.top/js/v-utilities.js.db83c80e.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2024-08-20 16:27 Times Seen188 Hash d0fe43b9dbea2e742a09b703a8ae8740 6d2308ff1b522eaf369e822fa44f5da00641d7aa 56a236062254405a564c1e4efc3c5530012a9ee23ef879113560fa138d85d5e4 Loading...

	ltj.soapauth.top/js/v-constants.js.388478b3.js	ScriptElement	600 B	2023-12-07	2024-08-20
Pretty URL ltj.soapauth.top/js/v-constants.js.388478b3.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2024-08-20 16:27 Times Seen188 Hash c30034434df6d386328a964482b5b74e f66835b1df6dc20ad1a79dc13f45728947109695 88c30f5bd4dc0e2079342d591c03431a90b035fde4d05b598f3722f7a34d328c Loading...

	ltj.soapauth.top/js/_prefetcher.3614355a.js	ScriptElement	1.4 kB	2023-12-04	2023-12-14
Pretty URL ltj.soapauth.top/js/_prefetcher.3614355a.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-04 14:50 Last Seen2023-12-14 07:53 Times Seen504 Hash f26371701ca0ea880b86d89062e8f61a 807bd478ad4368f28d8330556e8e326224671cc1 05f31d6772c32c0f3eca3da7fffc56de88f99cb11fd022215ee95a80ba6798b7 Loading...

	ltj.soapauth.top/js/v-attributes-to-props.js.4ec58b35.js	ScriptElement	702 B	2023-12-07	2024-08-20
Pretty URL ltj.soapauth.top/js/v-attributes-to-props.js.4ec58b35.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2024-08-20 16:27 Times Seen188 Hash d0264f52a1cc7664550937bf639048c4 81e4aba3a956efebde23dea9cb7591bf258d7fce 07c1f1a36ae8e906218d224ac8564f2a1e65d5cd1684d657769ee2aab665bc48 Loading...

	ltj.soapauth.top/js/_rtc.e5ad2fb2.js	ScriptElement	12 kB	2023-11-30	2023-12-13
Pretty URL ltj.soapauth.top/js/_rtc.e5ad2fb2.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2023-12-13 02:33 Times Seen194 Hash 08fa453bca5f1e6ce8580de948e34a66 5f2fac26eafc0ee9a511554ab1fa84545a448215 15c602b670b6359a69967fca6788325db8a163e3ede3f336ccda3dce12322084 Loading...

	ltj.soapauth.top/js/_each-land-config.437c8893.js	ScriptElement	72 kB	2023-12-08	2023-12-12
Pretty URL ltj.soapauth.top/js/_each-land-config.437c8893.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-08 17:02 Last Seen2023-12-12 23:35 Times Seen42 Hash 7142e11f2b6804247cef722cf4455745 b0479dbc15ce342a3c36f0ac534bc4e6e8a7a8c7 6e25d81219180d9bde4bc24bd6190e5a1156fff45598ff50c3e448e3189fb762 Loading...

	www.google.com/recaptcha/api.js?render=explicit&hl=en	ScriptElement	852 B	2023-12-05	2024-08-20
Pretty URL www.google.com/recaptcha/api.js?render=explicit&hl=en IP 142.250.74.132 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 02:59 Last Seen2024-08-20 16:44 Times Seen273 Hash 845a725772e2112ea1e28cb5be47ca9f 2ca60c0163f4dbd38715c538ff6027ac93db00b3 84a095eb2397a71d370f7a8a7677b757f3ded6edb7d2cd694a08b99cf6858777 Loading...

	ltj.soapauth.top/js/v-html-to-dom.js.bae53c4d.js	ScriptElement	364 B	2023-12-07	2024-08-20
Pretty URL ltj.soapauth.top/js/v-html-to-dom.js.bae53c4d.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2024-08-20 16:27 Times Seen188 Hash 1cd69bf4ab40f6f4ff6fe8ce21a6833a 68933511fe3a698350b8922e1a523c01ac6a0f23 282a237f2f44227aee34f8dffe1bb09684e50b9bb6bf31074d6baf785aadbbc1 Loading...

	ltj.soapauth.top/js/SurveyContainer.ce0c83a8.js	ScriptElement	55 kB	2023-12-07	2023-12-12
Pretty URL ltj.soapauth.top/js/SurveyContainer.ce0c83a8.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2023-12-12 23:35 Times Seen48 Hash a35ec98ed60a7d52917e11817ac0ac3b 8d9853f271b5c0a8ffe16d63d697fdfefc21f082 5234329a79b19dfd57e68dcc7f9295474635703683f30f4a9889baf828a4e824 Loading...

	ltj.soapauth.top/finance-survey.html	ScriptElement	807 B	2023-12-08	2024-08-20
Pretty URL ltj.soapauth.top/finance-survey.html IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-08 14:49 Last Seen2024-08-20 16:22 Times Seen159 Hash e3cbac787330f74bcb908a7e5e2a17f5 d124998b28c80d06be2b9986e012cb443b0ca90c 352c3254ac0b9482df522abf914e0744863afe28d7f2671d7453f4635be81f49 Loading...

	ltj.soapauth.top/finance-survey.html	ScriptElement	2.1 kB	2023-12-07	2024-08-20
Pretty URL ltj.soapauth.top/finance-survey.html IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-12-07 18:25 Last Seen2024-08-20 16:27 Times Seen179 Hash e864df19a78a5a30e1c01e156388729d b1014fd8905280862398dd83307fe135b81d81af b1e3a6f0f966a4c5e103e9886d94f7827892fbdac10d4200b47c1a896d96d95a Loading...

	ltj.soapauth.top/scripts/prefetcher.js	ScriptElement	11 kB	2023-09-09	2024-08-22
Pretty URL ltj.soapauth.top/scripts/prefetcher.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-09-09 22:53 Last Seen2024-08-22 11:17 Times Seen7151 Hash b1515a41bd47d83919c0f9d453006b65 10ce4d4cb080725e5cee62304ef07fef85971ef7 a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f Loading...

	ltj.soapauth.top/js/survey.e7f87d2d.js	ScriptElement	6.6 kB	2023-11-30	2024-08-20
Pretty URL ltj.soapauth.top/js/survey.e7f87d2d.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2024-08-20 17:22 Times Seen2234 Hash 28a4ce7c9a36ebc5a75cac3eb471ec47 55d853065d070b483c1bd080c2c04b46594b9afb b1536cfc2c0006d2d16c74788644558dfa4da4d795027bfc78b44c4f5e6a47f4 Loading...

	www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js	ScriptElement	512 kB	2023-12-05	2024-08-20
Pretty URL www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js IP 142.250.74.35 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-05 02:59 Last Seen2024-08-20 16:44 Times Seen1421 Hash af51eb6ced1afe3f0f11ee679198808c 02b9d6a7a54f930807a01ae3cdcf462862925b40 6788908efcff931e3c0c4fb54a255932414a22e81971dcc1427c8a4f459a1fbf Loading...

	ltj.soapauth.top/js/v-react-dom.production.min.js.9fb1fc03.js	ScriptElement	129 kB	2023-11-30	2023-12-12
Pretty URL ltj.soapauth.top/js/v-react-dom.production.min.js.9fb1fc03.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2023-12-12 23:35 Times Seen53 Hash 0916061193677043984f3214d2bbf62b 9a1c3320e51d8e192a24624e41007a9fae7f7477 35b65d23abb478aab6c67ed129850fcfb565364547d633273413bb451417fb63 Loading...

	ltj.soapauth.top/finance-survey.html	ScriptElement	96 B	2023-10-08	2024-10-28
Pretty URL ltj.soapauth.top/finance-survey.html IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-10-08 13:44 Last Seen2024-10-28 13:21 Times Seen27089 Hash 1c21f8c6a7c78b7e67c5272c65c97f91 1a2eb15ee36a8f8b7160358a304ccf575b571074 0af800d9d96b01d9183737d36c4e01792913fdcd393bc56727f1e9be39730fc2 Loading...

	ltj.soapauth.top/js/s-storageService.js.3bedbc45.js	ScriptElement	2.2 kB	2023-11-30	2023-12-13
Pretty URL ltj.soapauth.top/js/s-storageService.js.3bedbc45.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-30 09:26 Last Seen2023-12-13 02:33 Times Seen195 Hash dabc03d2a1b38abfa8ecb8370dce3926 8acd352960f6d534f766563cabec22f4b236c024 d3895e849fc23fe1662016aca3cc2cbf9ecbce01df27703230317dba50a2f134 Loading...

	ltj.soapauth.top/pfe/current/stattag.js	ScriptElement	19 kB	2023-10-13	2024-08-22
Pretty URL ltj.soapauth.top/pfe/current/stattag.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 13:29 Last Seen2024-08-22 11:17 Times Seen7166 Hash eee0fa1cefab154ab482da73fe023bee 1d3c88baee1b8527a30190d694cc8c6378b7f3bc 333132f2f62e5bcef5ab8a1950e7a8342023c0cea68b563b1130bea16dd0bc6a Loading...

	ltj.soapauth.top/finance-survey.html	ScriptElement	250 B	2023-04-11	2024-10-28
Pretty URL ltj.soapauth.top/finance-survey.html IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-11 14:49 Last Seen2024-10-28 13:21 Times Seen26231 Hash 9d9b48d49f88bc3e71b52a408295effa ca122790003cf5d50f71165ed81d120d8a91199e e7427cfeefd59822deeb50274e744da9ce4173ab34ba825aff2d79f1dbc7be76 Loading...

	ltj.soapauth.top/js/config/data/sd-1203056.js?v=10	ScriptElement	8.0 kB	2023-06-05	2024-08-21
Pretty URL ltj.soapauth.top/js/config/data/sd-1203056.js?v=10 IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-06-05 17:02 Last Seen2024-08-21 09:42 Times Seen1237 Hash 2d3ed63cc5c82fe54bf23ebef5fcb13f bdd62d68c03e977a537513e2facf815f1be2bcc7 38d049bba653bd283e2efcf4615e3c7596c927e3a8e3555f0c6f139d4cf3b465 Loading...

	ltj.soapauth.top/js/v-domparser.js.858d3ec4.js	ScriptElement	1.7 kB	2023-12-07	2023-12-13
Pretty URL ltj.soapauth.top/js/v-domparser.js.858d3ec4.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2023-12-13 02:33 Times Seen188 Hash 8d3a852efa45cfc7e20692ea0e31b31c 0dd7d5bde48fbccbf8d0c81fc04872e986a5ded9 21dd8ab462109cf5410b6513758699a7a701c685609504fedcabda77ec6eeed3 Loading...

	ltj.soapauth.top/js/v-index.mjs.d477d938.js	ScriptElement	35 kB	2023-12-07	2023-12-13
Pretty URL ltj.soapauth.top/js/v-index.mjs.d477d938.js IP 104.21.80.152 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-12-07 18:25 Last Seen2023-12-13 02:33 Times Seen188 Hash 65d8637249aadc9e85e6636b27f37789 67d0999f7dda37bd098a02a0711f38b09e5ac010 ff0e3b44c8235e809cdd4c66186e6bad1d8837516210f4dc281bed2c9f068f71 Loading...

HTTP Transactions (57)

URL IP Response Size

my.rtmark.net/gid.js?userId=m34dpgr1hmts2z73h96r9pvkcvmlmci8

139.45.195.8

200 OK

65 B

URL GET HTTP/2
my.rtmark.net/gid.js?userId=m34dpgr1hmts2z73h96r9pvkcvmlmci8
IP
139.45.195.8:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT

File type
JSON data - , ASCII text
Size
65 B (65 bytes)
Hash
e3645841e408f76ca2f63d2e83cec261
43c27d629a3701c666de035d8548ac62d9598c13
499f73f624bf0993caa9e2b62126ddd92ee35c067024a97dd2aeef9a4f904425

HTTP Headers

GET /gid.js?userId=m34dpgr1hmts2z73h96r9pvkcvmlmci8 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; expires=Tue, 10 Dec 2024 08:12:17 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

dortmark.net/sync-metrics

139.45.197.248

200 OK

0 B

URL OPTIONS HTTP/2
dortmark.net/sync-metrics
IP
139.45.197.248:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:17 GMT
content-length: 0
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

dortmark.net/sync-metrics

139.45.197.248

200 OK

17 B

URL OPTIONS HTTP/2
dortmark.net/sync-metrics
IP
139.45.197.248:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT

File type
JSON data - , ASCII text, with no line terminators
Size
17 B (17 bytes)
Hash
5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 676
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 0e07de81f3978516564bc61ca5a99ed6
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

ltj.soapauth.top/img/comments/unnamed.webp

104.21.80.152

200 OK

264 B

URL GET HTTP/3
ltj.soapauth.top/img/comments/unnamed.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
264 B (264 bytes)
Hash
606085e7a74fd169da34f9fcb43ad12d
77226a50488fb48256d36f1810a136b69d635f74
df20f4c1d87cb10514a6d526dde70759334705d90a909df0e6cb130061ce1ea5

HTTP Headers

GET /img/comments/unnamed.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 264
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: "65731759-108"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4ln2sJ9zZ5yUJ%2FDp257pI7IlhnW1A7N7MzzKEXxZTwFc%2FRwf8vQVt1%2FIySnVVcTeaUwjnwI%2BUwWqH6gR1y05Bx%2B3BmNx36Hc7U2wYfsMrmsUw4GMGp3gNA3Fcoig1W4zAgoE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43029d421c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-dom-to-react.js.043ec07e.js

104.21.80.152

200 OK

1.8 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-dom-to-react.js.043ec07e.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (1085), with no line terminators
Size
1.8 kB (1762 bytes)
Hash
5996d58ed16f5b9c112366d813267675
c3dfa6acf6b7ae6ee9f90bac0c79bd7d35d747b7
553dc04e006ad66545ffc7b8e53f5f3ada7a534253563fd8a6bbdd79c07a3c49

HTTP Headers

GET /js/v-dom-to-react.js.043ec07e.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-43d"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vIUrxjbiQHkitJMqk%2FXWP8YX6mkLDaFgR5UbIKzcPBz66I2WAQwG9Fx0qyUglHHY4YDubsU2VBtoHwmVVMpG%2FGKc4Z2a5EPoYNnaHahfxTF46HGz4764GvTguC6nQhyRqRvQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c881c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/icon-survey.svg

104.21.80.152

200 OK

2.1 kB

URL GET HTTP/3
ltj.soapauth.top/img/icon-survey.svg
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
SVG Scalable Vector Graphics image - , ASCII text, with very long lines (2674), with no line terminators
Size
2.1 kB (2126 bytes)
Hash
9a8ba19b913810bd358e5caf3a7c2a75
6eff5e84f2b82772bb6029088ed852a8161b3252
58b0a3aa24ef605d4b812bcf92cbaa2e7f78bd43f929ca6362bc259da610399a

HTTP Headers

GET /img/icon-survey.svg HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/svg+xml
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-a72"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DQkXByk43tXHqbXfJDxT2yHP0RMaQfP%2F30EoeHdAng%2B7h5%2BHKpPH8nJhSdCI4v7XCSafmbLIEkPPcf2OGJ6AKj37F5e6pFwKsdL9v%2B%2BMygeShaUbvdIPBukNrAXYWSYymhna"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a6e1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js

142.250.74.35

200 OK

205 kB

URL GET HTTP/2
www.gstatic.com/recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js
IP
142.250.74.35:443
ASN
#15169 GOOGLE

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint5F:60:69:C9:59:6D:F1:B5:87:82:8D:B0:57:3C:D9:24:10:FD:74:D1
ValidityMon, 20 Nov 2023 08:08:49 GMT - Mon, 12 Feb 2024 08:08:48 GMT

File type
ASCII text, with very long lines (568)
Size
205 kB (204921 bytes)
Hash
af51eb6ced1afe3f0f11ee679198808c
02b9d6a7a54f930807a01ae3cdcf462862925b40
6788908efcff931e3c0c4fb54a255932414a22e81971dcc1427c8a4f459a1fbf

HTTP Headers

GET /recaptcha/releases/cwQvQhsy4_nYdnSDY4u7O5_B/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 204921
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 09 Dec 2023 21:16:49 GMT
expires: Sun, 08 Dec 2024 21:16:49 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 04 Dec 2023 17:08:31 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 125728
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ltj.soapauth.top/img/comments/person-1.webp

104.21.80.152

200 OK

1.1 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-1.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.1 kB (1122 bytes)
Hash
56441eb05774cd7ed15d829e06947346
25649e1ed3820d97bd8bcdc737974e0c65adc1aa
5be168d58cf2dc0e41bc5a9b386add0d57fee26848613ca601f0c31378a8ad02

HTTP Headers

GET /img/comments/person-1.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1122
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-462"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dIWB%2Fu1KmhUwNqtyUeZFIlNfUZZYpSXi803ej%2BPmPQYbqxyyFoHCH5e1%2B45kPzeAcGPS1CPi47qq78cYrqOa3fnHrcGoftB3%2Br2ZITfqEg7WLdUhEp%2BZvjmErC4%2FqW4P5ke7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43029d441c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-8.webp

104.21.80.152

200 OK

1.8 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-8.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.8 kB (1802 bytes)
Hash
2ad9296fef7cd1f60823b80098d31c1f
145b3a66be3deb658a453963cef39a018b6f0928
82bcaa459e3d55b1f99c7154b506f5f5f464f04c5873a3e66ebaf5d064c4de6d

HTTP Headers

GET /img/comments/person-8.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1802
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-70a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WYQajMR%2FvkIzPH7AI6uXSx1MWge7oIB1AAKkkmMLQ7irXktr5QcxVpgiLdDzdQO6r5gLobxX8pALXtvxw%2F%2BENya2VrQLu5gvtJ7Zv%2BHHA4XBcAfBbKtP4zuxP2qb6eOOkUDr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad4f1c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-3.webp

104.21.80.152

200 OK

982 B

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-3.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
982 B (982 bytes)
Hash
489a7f64f96c92f3325af92fa2af78b5
098cbcbd7ee329321d2fb7bac74535ab258a1f97
fd84809b70e4186fc2529a7ce54316e51ddf51ff8b2f099dcdb88ea91840be4f

HTTP Headers

GET /img/comments/person-3.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 982
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-3d6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=URJqfnt6bpIW9xI8nwTDDmJ%2BFITSkS0uaPhVcZGOkaKZFkkiQvE9mUqu2iZlk9H0%2Fles2TSGdskBXeDiInKEnr4vdAz5XIwctt4WHHKKIymSBrsA%2FvhCeWE7vy2LvzY%2Bzba6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad501c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-9.webp

104.21.80.152

200 OK

1.7 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-9.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.7 kB (1654 bytes)
Hash
12f578cbef79e63d347e2c8384c03ce6
496afa2132dc6a09052596587de749aefa634975
be233e744893994063c5cc341d9f60ff9ccdaa582da7b05bcfc01a7415b7cffa

HTTP Headers

GET /img/comments/person-9.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1654
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: "65731759-676"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ivlp2dNAHh8sZ%2B5XZ9kOQA9Gh7Z3hK%2BCVwy%2BiF2bt690MWWo3KZQ2nEB%2FtoOpnSV%2Bzv0hWIzB61%2FP5Ap4BKsl08RhPpWHePRBoFbhIVbWV0Gpl45t4YFpaj2ErFP%2F2xDbON"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad551c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/pfe/current/stattag.js

104.21.80.152

200 OK

9.5 kB

URL GET HTTP/3
ltj.soapauth.top/pfe/current/stattag.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (19024), with no line terminators
Size
9.5 kB (9536 bytes)
Hash
eee0fa1cefab154ab482da73fe023bee
1d3c88baee1b8527a30190d694cc8c6378b7f3bc
333132f2f62e5bcef5ab8a1950e7a8342023c0cea68b563b1130bea16dd0bc6a

HTTP Headers

GET /pfe/current/stattag.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-4a50"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o8qruKL%2FA1ZOaeX5INZfMwOfX6K%2FYS393%2BPJyymIVK8%2Bb9yrxoFR%2Fw0KxnPYNnIOo4act3WXISBpiaNNx1Ll%2BtBOxrL4sS9wN855mJ%2BQJdcA88neFi2Sx0VrdQT8D%2FeKjRmI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43017c761c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/_core-survey.37b49ebd.js

104.21.80.152

200 OK

48 kB

URL GET HTTP/3
ltj.soapauth.top/js/_core-survey.37b49ebd.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
Unicode text, UTF-8 text, with very long lines (65456)
Size
48 kB (47539 bytes)
Hash
27b8bde99ea2a8fb94e1c95d8231ea52
6fb32b1e301ec7afaf8b63cbca5bc9dd580e51e6
bcb4b0a9bbdf73a179828ca56e6217547b2a1a54510a17acd99f6f98d73e13a4

HTTP Headers

GET /js/_core-survey.37b49ebd.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-29d6f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x1G71ri5bXFaQCh2rmxdp54gsh5iSMefXa6VJ%2Fh9TSOpp7HlyrR5y5FU4BrzryylIDOg5LdgQESzajZuxD14U%2Bhm2PLCjr%2BCoed85rYERTTe%2FE7q8fztGjg3FK%2FCy2xmGPi2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a691c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-index.mjs.d477d938.js

104.21.80.152

200 OK

9.9 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-index.mjs.d477d938.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (35287), with no line terminators
Size
9.9 kB (9895 bytes)
Hash
65d8637249aadc9e85e6636b27f37789
67d0999f7dda37bd098a02a0711f38b09e5ac010
ff0e3b44c8235e809cdd4c66186e6bad1d8837516210f4dc281bed2c9f068f71

HTTP Headers

GET /js/v-index.mjs.d477d938.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-89d7"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ukymQ57wc2if1cjbcc37OM24M6RL%2BhnERqZMRIrAnGe4msxsgNnFw3RSn2NTEawf06BLveIgUfo0uhuWoywqpWu%2B5yFO0teICiuBO1wLvocCmtkpOMaVyTnI59UnDpGeDcpz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c7f1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-14.webp

104.21.80.152

200 OK

1.7 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-14.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.7 kB (1672 bytes)
Hash
7dc8c2c56e77f2a329230f677b6e5bf8
23b56b25ef6370e93d6c070c212684ba99612fcc
49ce3d1aa6533e2c9715cdc971939ba08f7072b87d7f60dd1dc3f0ef892e44fc

HTTP Headers

GET /img/comments/person-14.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1672
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-688"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mzlyo%2FVudehgI%2FHo2kPeTRF07qvgS4m%2Bj%2Fyt8bU10SCDnig8We0g1KOKYnD4fYBJFsVmg1ASw0tsaSUquIUlWla6VY2UiWjWvJeggx6ZkOGAx8rCRbcaohqYaH1%2FUX%2BUmf4v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43029d451c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-4.webp

104.21.80.152

200 OK

1.4 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-4.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.4 kB (1356 bytes)
Hash
a78233e0cf1abbb3c5c98ef32a087d96
5ac6cdfb7f9e7be828a4d01e57f10379ef173889
3854114bf0acf8bc190e93893a80429d611c1d16b61d6cde07af182c232a30d7

HTTP Headers

GET /img/comments/person-4.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1356
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-54c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HPU010aa4cb6jqIX1LXUaqMI48EKIPvq2LynDtESHSoOXbV%2BXppUR1dvnwRRimBfPwhr9iGvJukNnYPckqPU3i9rGuSedS4uGxs%2Foj7RrfWJxvM135VDmnLlUMzK4LVKlzul"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43029d4a1c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-5.webp

104.21.80.152

200 OK

1.8 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-5.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.8 kB (1846 bytes)
Hash
10f4b15b0a471e17ef598de73ffb319b
e3fd3478fa27f2cce0a9b945c50d640832594594
21411e70dfd7d12a4180188a1ccf3797df346cf6cb6f477f5ecbfb505d6fa378

HTTP Headers

GET /img/comments/person-5.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1846
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: "65731759-736"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=oHFRkf%2FhAvCY1qUbUE0IhiQvVV9hqVq9HwdHNu5XAnfdA5lVg9gwdkOPlW6P4XRdh344vvVA1ntI6f39gro1j2yGn%2FX9HrrIEOAe5Q%2F6ZHQuDyRgxM1Twim3B08J%2FTb1wa%2B1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad4b1c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-6.webp

104.21.80.152

200 OK

1.9 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-6.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.9 kB (1854 bytes)
Hash
0f174a9245ed9f2a0660204a8320880f
fd36dc7b39c675bff5d4dff0b331d70b57f0ec7d
1cfb6cdf94c080825e93d4bff72079fdca2d8f3d9f7d2e75badf48c29d4e31c4

HTTP Headers

GET /img/comments/person-6.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1854
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-73e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y9h6QG16yIKaNjsTuEthZTIu02H0RNNk%2Fsb%2BF0P5HVmh%2BgoZyRydTVzK3K5rQVQNCkOMt1UPl7M%2FNyXf1%2FybVmpbFkSAeRc6nzjiEG46R4hflCKsPnGvS4LTzMQqn4mNPcaM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad4d1c02-OSL
alt-svc: h3=":443"; ma=86400

dortmark.net/sync-do

139.45.197.248

200 OK

0 B

URL OPTIONS HTTP/2
dortmark.net/sync-do
IP
139.45.197.248:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

OPTIONS /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:17 GMT
content-length: 0
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

dortmark.net/sync-do

139.45.197.248

200 OK

179 B

URL OPTIONS HTTP/2
dortmark.net/sync-do
IP
139.45.197.248:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT

File type
JSON data - , ASCII text, with no line terminators
Size
179 B (179 bytes)
Hash
081142aa1c9267422ee7fd25ac457579
cf8a223610da412aab4cc9aec68f6f304258b3ce
58084d495376ed2e41f026c352cabb187129c58109f2b15caeb1a539deb2cd19

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /sync-do HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 163
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/json; charset=utf-8
content-length: 179
x-trace-id: b7f890a6e2c481f939bced405cb14ace
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

dortmark.net/sync-metrics

139.45.197.248

200 OK

17 B

URL OPTIONS HTTP/2
dortmark.net/sync-metrics
IP
139.45.197.248:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT

File type
JSON data - , ASCII text, with no line terminators
Size
17 B (17 bytes)
Hash
5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 1627
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 2f1693879590c5c3f2f33eeec3eafc4f
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a

37.48.68.71

200 OK

12 B

URL POST HTTP/1.1
datatechonert.com/log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a
IP
37.48.68.71:443
ASN
#60781 LeaseWeb Netherlands B.V.

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerSectigo Limited
Subjectdatatechonert.com
Fingerprint6F:17:15:C2:7F:CC:16:6C:9D:C0:AD:C3:EE:DA:69:61:8C:77:0B:5B
ValiditySun, 18 Dec 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT

File type
JSON data - , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /log/add?cid=eacf36da-c06d-4d71-90cc-88e30cd4240a HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 1363
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Mon, 11 Dec 2023 08:12:18 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: https://ltj.soapauth.top
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true

dortmark.net/sync-metrics

139.45.197.248

200 OK

17 B

URL OPTIONS HTTP/2
dortmark.net/sync-metrics
IP
139.45.197.248:443
ASN
#9002 RETN Limited

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectdortmark.net
FingerprintFB:73:EE:33:AC:A4:2C:AF:0B:D4:2D:B0:E2:CA:21:16:50:E4:1C:C4
ValidityWed, 27 Sep 2023 17:36:39 GMT - Tue, 26 Dec 2023 17:36:38 GMT

File type
JSON data - , ASCII text, with no line terminators
Size
17 B (17 bytes)
Hash
5b64e8b89092b2e3dfd448b10700627f
484b3032619fa1acd135d114565b0a5166281c22
f1ea07a1e51a389c8de07120ae5c2e432e9dd8f4fbd6f92489f185b0523a3fd4

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

POST /sync-metrics HTTP/1.1
Host: dortmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 758
Origin: https://ltj.soapauth.top
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:18 GMT
content-type: application/json; charset=utf-8
content-length: 17
x-trace-id: 3a078f4aac3d23c365add5cc9d554c43
access-control-allow-origin: https://ltj.soapauth.top
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace
pragma: no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60

139.45.195.8

43 B

URL
my.rtmark.net/img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60
IP
139.45.195.8:0
ASN
#9002 RETN Limited

Certificate
IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT

File type
GIF image data, version 89a, 1 x 1 - data
Size
43 B (43 bytes)
Hash
b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

HTTP Headers

POST /img.gif?f=sync&partner=37faba736e092fd0fbd4bb09c7ac1e23053143b486f9f8503431b4ff9f42fc60 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Cookie: ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

HTTP/2 200 OK
server: nginx
date: Mon, 11 Dec 2023 08:12:40 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; expires=Tue, 10 Dec 2024 08:12:40 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

ltj.soapauth.top/js/_prefetcher.3614355a.js

104.21.80.152

200 OK

1.4 kB

URL GET HTTP/3
ltj.soapauth.top/js/_prefetcher.3614355a.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (1423), with no line terminators
Size
1.4 kB (1371 bytes)
Hash
1661e8c4be4e405cc457a5282316ded0
0c2abd0e80c4df732e504c0b154b956ad7da5c3e
4219b5f72ca8743dd40e9841b9a9e800992a846f4c6c4d5afd6517ab90a3bc26

HTTP Headers

GET /js/_prefetcher.3614355a.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-55b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0EXTDpv4%2BMU9DCXqEiFtwBl24iA2q5OVLzzgAgBkQ7av47PY1kHqz9Ise1u%2FMRqbEnkn0nF%2BTFaj%2FCdNoZsU1b1QoUNgc5sob5CvvQY3DcZGYKedMsWXg9aK8NcSv03dvwZq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe4a5b1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/scripts/prefetcher.js

104.21.80.152

200 OK

11 kB

URL GET HTTP/3
ltj.soapauth.top/scripts/prefetcher.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (10761), with no line terminators
Size
11 kB (10761 bytes)
Hash
b1515a41bd47d83919c0f9d453006b65
10ce4d4cb080725e5cee62304ef07fef85971ef7
a444e5e431c2189cbf352c01d0b08dd505fe7fffa99dc0b12b4dbd0791fe564f

HTTP Headers

GET /scripts/prefetcher.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-2a09"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1Xb5r6eavNJ1tD64J36uDrnGmILylk64LmWOSH55HRWb0BSmkPdpipsSe5aGiFKUM82KhwEwuEfcMX8ZXDMynOM2UKyS8r%2FFNwpAWtP6kQOuYD6JoIu%2BmFURS3ndfvjen3eX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42ff5b721c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/config/comments/en.json

104.21.80.152

200 OK

4.5 kB

URL GET HTTP/3
ltj.soapauth.top/js/config/comments/en.json
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
Unicode text, UTF-8 text, with very long lines (5173), with no line terminators
Size
4.5 kB (4522 bytes)
Hash
50680109e350a76b2bb8131cdaeb735e
0c14dde15f13c0deefd1ff3eb8c4608e73d133b6
a9ebf6b7ceb48bd6c63b99320183934f2b183af64cc7f27fd85ebe7191d92e42

HTTP Headers

GET /js/config/comments/en.json HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/json
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-11aa"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KHMpGlEQ9%2B0IWqMUM9uj6YW2pMayO7CQpH6tbwuvw4LqfkB8aZ2MjYvOfbHcEPEVNWVFfkEugUFu8Woa1ea0Ggxrg2RQd%2BT43A%2BPBpMr5a%2FBZzxJdQQdRSBE13pWBCHm%2BOal"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43017c7a1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-12.webp

104.21.80.152

200 OK

1.4 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-12.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.4 kB (1390 bytes)
Hash
a2a75db01afaab639bcc0c6c76a14c09
2c773be63192164745f2a42c2fde74812c6e905d
f22ac207c07f65a697682c466b4e87364c43a720b4e240df2d418ffbd8070e5e

HTTP Headers

GET /img/comments/person-12.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1390
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: "65731759-56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OyXc1nJ%2BUUFXZAR3tw7nKhEQZz%2FBA2hsmiTAb%2BaGK7CNvDOWK7gKTVF6gjXCRWEFHelo3ckuHmYupcax1UMMdctU4AGR8719cd%2B%2FHESdCE0409QArey%2BPbFM6jTGZNtg3hDu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad591c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/s-storageService.js.3bedbc45.js

104.21.80.152

200 OK

2.2 kB

URL GET HTTP/3
ltj.soapauth.top/js/s-storageService.js.3bedbc45.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (2216), with no line terminators
Size
2.2 kB (2170 bytes)
Hash
7cd5f2660e654a1feafafbbe6ebb7830
850cd4f60b74704a85a8cff7c0c487911514e216
0d675a21c02c93f8020b295737138ea823e66c82ca934d1191a90547fdef98c8

HTTP Headers

GET /js/s-storageService.js.3bedbc45.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-87a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8qYaQnyfORPQWgfz6WkTPajRyJ0f4y7sGBes6u%2BbapQanTZ1d%2F17M1hacLVeAsg4oA1HLltOSCdMIWjhzD19gbR5fkeJRio%2Bo6rYRyiUJ%2Bkdpf1vyPEMr6EZcmFFwBMPAWhw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe4a621c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/s-checkSessionStorageAvailable.ts.42cc21e7.js

104.21.80.152

200 OK

330 B

URL GET HTTP/3
ltj.soapauth.top/js/s-checkSessionStorageAvailable.ts.42cc21e7.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators
Size
330 B (330 bytes)
Hash
d050d5fce620768cff66cf220e7f6247
a0da0c274d2ee89c77011c5f7c61a1bd8fa8d243
7f9b5a7991811b9cf4b2253ae17f34be2a56b73337e887e14125c577308a4923

HTTP Headers

GET /js/s-checkSessionStorageAvailable.ts.42cc21e7.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-14a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wQcweW9kBBNVtmrJ53d3%2FQMMTmn%2BkYHQbtshse3SAan7Kxt2Dju%2Bi2VJ8YA07RTIhT3gYeIv54VdZQ0niF4dhf6plO6d6JkSchP7pIYSc%2Bq315FVopu8NsW6%2Ft5iDkWAVvTQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe4a631c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-react-dom.production.min.js.9fb1fc03.js

104.21.80.152

200 OK

129 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-react-dom.production.min.js.9fb1fc03.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (65440)
Size
129 kB (129359 bytes)
Hash
0916061193677043984f3214d2bbf62b
9a1c3320e51d8e192a24624e41007a9fae7f7477
35b65d23abb478aab6c67ed129850fcfb565364547d633273413bb451417fb63

HTTP Headers

GET /js/v-react-dom.production.min.js.9fb1fc03.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-1f94f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AnI9XAoZy%2BVcqhognq0Ih7gX9S78GvTw8Y3Qgh5WKz7wqbf0WBY52Eovv1F4Dr2HVHwuYeTsGJJVR6z7DzHColK8%2FRgilP%2FlauYkuoyDw4eqJ8Sp9YQYUttKsvxVnizMed0G"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a681c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/config/dict/cookie-consent-1.json?v=10

104.21.80.152

200 OK

6.8 kB

URL GET HTTP/3
ltj.soapauth.top/js/config/dict/cookie-consent-1.json?v=10
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (6009), with no line terminators
Size
6.8 kB (6757 bytes)
Hash
4b2ff958e811a50d2f641818590b443d
6abae297812bb55fad869e953e7fdf7469cbe1ae
9c77a5f3d0028d9ba122ed15728ee7b144619431f8302503a19c5785ddaa06b8

HTTP Headers

GET /js/config/dict/cookie-consent-1.json?v=10 HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/json
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-1a65"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D%2BwXwylfA9UZB8VdwV4mS6EzdPhYeumB9XWxSioT35yOkGP0c1p4zPdxVHiF6r2FHgUeNmSdoKnnyEw2WRyKNLw%2BrycILB69dIPCKOrlUkJWGx97GCFXtuX3YmKtEbN4lG0h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43001bc51c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-10.webp

104.21.80.152

200 OK

2.2 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-10.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
2.2 kB (2222 bytes)
Hash
9dd9074774147c349c8a5bd4760c3cfb
99675a91391516dee57d557728a8cc96257429a3
318ecbca5e7cedf56bad3a556b5c8a8fd14b22a3d536c85f0e4a646e40d8d332

HTTP Headers

GET /img/comments/person-10.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 2222
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-8ae"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vkEoLyptiFR8wVbPGT%2FeDRe%2BrfvI3kPXmZfNwVawRzOE%2F%2BCkZDLjo8Y8TbtTQlEXm5Pzj2XFuOQZMiEcb59Yszk5UIPPQ%2FqH%2F1wvcZImGBU36F92qi9EGLxaLhW9MRYFwGDX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad561c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/config/sd/sd-1203056-en.js?v=10

104.21.80.152

404 Not Found

0 B

URL GET HTTP/3
ltj.soapauth.top/js/config/sd/sd-1203056-en.js?v=10
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /js/config/sd/sd-1203056-en.js?v=10 HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 404 Not Found
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: text/html
vary: Accept-Encoding
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5ujx3MwftxeF2UufcCA185KQLkJ8WmIxFm9qAl2yD9cI5NzLCRpDlxXAIvXLQG0J0hc29YA99Hf3z2oJYov0c8jy55xbFtkU0QFQMQzudPr%2BbtR4G%2BNOzm7TU3aCKdsQ704J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42ffcba01c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

www.google.com/recaptcha/api.js?render=explicit&hl=en

142.250.74.132

200 OK

852 B

URL GET HTTP/2
www.google.com/recaptcha/api.js?render=explicit&hl=en
IP
142.250.74.132:443
ASN
#15169 GOOGLE

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerGoogle Trust Services LLC
Subjectwww.google.com
Fingerprint50:3E:DA:12:EC:7F:39:A5:E9:4F:16:D7:D6:AA:BF:45:15:44:7F:E9
ValidityMon, 20 Nov 2023 08:09:47 GMT - Mon, 12 Feb 2024 08:09:46 GMT

File type
ASCII text, with very long lines (852), with no line terminators
Size
852 B (852 bytes)
Hash
845a725772e2112ea1e28cb5be47ca9f
2ca60c0163f4dbd38715c538ff6027ac93db00b3
84a095eb2397a71d370f7a8a7677b757f3ded6edb7d2cd694a08b99cf6858777

HTTP Headers

GET /recaptcha/api.js?render=explicit&hl=en HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
expires: Mon, 11 Dec 2023 08:12:17 GMT
date: Mon, 11 Dec 2023 08:12:17 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ltj.soapauth.top/js/v-node.js.a99fd0e8.js

104.21.80.152

200 OK

6.3 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-node.js.a99fd0e8.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (6337), with no line terminators
Size
6.3 kB (6251 bytes)
Hash
2bc9e40d5258a1edf98da09a9b2c7d20
6ce9def8b0a34f41b9cce0c1fc7171963c28041c
269c009272e8400f468a559b574497ba2faf89852e34eb0c36641f8bc022a108

HTTP Headers

GET /js/v-node.js.a99fd0e8.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-186b"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dfQj6Oaf7HKyGTkcQKMVHTdudrQPTIyW97QBn%2FcDH%2FzD6%2Fx4AJtA2%2BYWTO2SquCuSFHyAmKrT0%2BbTQ%2F%2FtApwsMSTXLOozHe8mqNAnvYqGQCBMrJyaH6ewq546Nm2bYOl8%2FWC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c811c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-utilities.js.db83c80e.js

104.21.80.152

200 OK

2.6 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-utilities.js.db83c80e.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (2645), with no line terminators
Size
2.6 kB (2577 bytes)
Hash
8644ef6d4c8cc5d452605e2e370ada41
774e2a4457d8b397cccb9b9bf47b3b7e2e7ebabe
8a3f6c815fc1aa7f1355b4563427c7793d99a51e1afadf7d2e081678bec2785e

HTTP Headers

GET /js/v-utilities.js.db83c80e.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-a11"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IpLsVZFelwNTty7bl%2F8nGZJ1QwMPYB1uemCTWoNftPyhp7mOX2EfGapHNq4y1rfMJyeKgKu3GRZLk0AM5vG0ccx5j2rcnD9yC01gH1gRd6fNlgts%2BpDmEtdU%2FU9djbIiWKGP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c841c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/css/survey.c53fa4d1.css

104.21.80.152

200 OK

69 kB

URL GET HTTP/3
ltj.soapauth.top/css/survey.c53fa4d1.css
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (36567)
Size
69 kB (68659 bytes)
Hash
091901aa8f68e377ba219183cf5c8a8c
13ff62d3d1d19e28ccd50bf25ec5bdd1fc0139fd
f2e2fd725bd54e110a927429052ede9d7c0cfdba8676d77efc4cea46b7799039

HTTP Headers

GET /css/survey.c53fa4d1.css HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: text/css
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: W/"65731759-10c33"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0rhQfzosX49AQw6%2F4hJekP%2F6aiRGaDEA7RoJv7lu8jAl6AD24siXcY%2F8tQyRRflZBuOsgKXX5R%2BVOWC9vYjCcv8rvuhMNk21W8cBzKlzqNMUg5atv2%2FOFUWvAss7UzHeCrAb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a6d1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-constants.js.388478b3.js

104.21.80.152

200 OK

600 B

URL GET HTTP/3
ltj.soapauth.top/js/v-constants.js.388478b3.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (664), with no line terminators
Size
600 B (600 bytes)
Hash
765263e0e1f3402953778e149e651af3
04b3c44eb068b0a9af5e8678463236377b9e3324
6eabbee437e27dc6092f02724a6b7b80b8e3750bb7095bd797d2c6ce4d8ed1da

HTTP Headers

GET /js/v-constants.js.388478b3.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-258"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=mVTx87vPqUFm6y%2F%2BA3Ij1WkENPPZAMge5KmABnYbtWb6MWSO1VklABlbkvwlCHIJPZSE9THP20%2FGhDLghF%2FaObOn0RZOpiRMY3weH7xhGGNAcs1%2F9GikIdU2VwoiOafIrXex"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c8b1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-11.webp

104.21.80.152

200 OK

1.5 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-11.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.5 kB (1526 bytes)
Hash
0100f949c3302195d906e13bc199399d
2b39580485f3e9ca81a8a2ead4747f89731800f4
10df37a82d90b2225e19460cbe7403726591fbd02caabfdf6a2884db631d8511

HTTP Headers

GET /img/comments/person-11.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1526
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-5f6"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k9GRzKpVQV4vYV0RnJ9Mx8x6NfISDFVVA8PZfd%2BGtVH%2FJEFaHVuRfq9sg%2B4VmGSi6De6FE6Q%2FhNonvlBjA4GDFHUFjxu2A5hyQef816LRF9JoHEN388jelG96uJBRqK0OQOR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302ad571c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/_each-land-config.437c8893.js

104.21.80.152

200 OK

72 kB

URL GET HTTP/3
ltj.soapauth.top/js/_each-land-config.437c8893.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (65452)
Size
72 kB (72207 bytes)
Hash
7142e11f2b6804247cef722cf4455745
b0479dbc15ce342a3c36f0ac534bc4e6e8a7a8c7
6e25d81219180d9bde4bc24bd6190e5a1156fff45598ff50c3e448e3189fb762

HTTP Headers

GET /js/_each-land-config.437c8893.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-11a0f"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ywLSdG7G%2BzLYLpnMTOGgNdl9ggM%2Fwv4vk5gE2JR5KBuNbSd203U4XqpMVFgUk5ngCentEtOnzI31%2BDJ2oA5tklsNr90K5x0myHRzEkbMSEPEVGpaQ6f1IyZjoMIdQMaTNXts"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a671c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/survey.e7f87d2d.js

104.21.80.152

200 OK

6.6 kB

URL GET HTTP/3
ltj.soapauth.top/js/survey.e7f87d2d.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (6859), with no line terminators
Size
6.6 kB (6645 bytes)
Hash
5831e4935faa8a5288531f84b0fa3e88
0f689239ccc6ca3495480c1b9435b4764a84cb65
a6e45b0e0d8aaa840601ca5bb6f781eed899f8f761488ec55e10e6e714e78b62

HTTP Headers

GET /js/survey.e7f87d2d.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-19f5"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KqdHcPIxYXOwC8UeZISFsQ24q9XsFiILlklkr5cMyyJFknzQkjEV3chU2QYXlDfqBT7Ekz%2FNKQrW95J96eIcqaNIrEH5GumF1Cobmt88bPwhO3kmcmIR9YqCNMVjxYWp8592"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a6a1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/s-checkLocalStorageAvailable.ts.127e6df5.js

104.21.80.152

200 OK

330 B

URL GET HTTP/3
ltj.soapauth.top/js/s-checkLocalStorageAvailable.ts.127e6df5.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
troff or preprocessor input, ASCII text, with very long lines (338), with no line terminators
Size
330 B (330 bytes)
Hash
d05168b91c58669692c647d335c1f3f1
29857c0aa74e8b6a3f1a323bd2d3610b38090412
4426bdbe92da06976c2e598407e03542bddee7ebcb4895125652d31cdcbe7421

HTTP Headers

GET /js/s-checkLocalStorageAvailable.ts.127e6df5.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-14a"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XkJpDlIA0EapanfLKSRg71dNZP5%2FAHd6f0OEGb6rR6Eu5xpl%2B7iWM%2BgkZw3DuUBpqcTSHBwQJsJSS1PuQZ7BfNu27BJ5n6505NSuiErK1iA%2By%2FueWYHECb50fsyWSmNMbUdm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a641c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-html-to-dom.js.bae53c4d.js

104.21.80.152

200 OK

364 B

URL GET HTTP/3
ltj.soapauth.top/js/v-html-to-dom.js.bae53c4d.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (373), with no line terminators
Size
364 B (364 bytes)
Hash
e6b3893f291ac5c54a8272e8d916bfb6
1a2d5df8cad6000e07669cd7d93ead48fe71d4e2
02218b13782abd02dffe61f9227e4f8c38ae8fc7595c20c6f421e45e9756e1f1

HTTP Headers

GET /js/v-html-to-dom.js.bae53c4d.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-16c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sn7NLJeWJysZz1NqVmxSbcikntqyGvTjcL0Fgy7TRtkHS5zK3pReua0gcbypnYbdjj5ezV%2Bz24ST3zhxuIHVJzuogrdIo4VnxuEv2pL03FlJG0xQNA2fcogc%2BGDBuFccipwR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c8a1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/_rtc.e5ad2fb2.js

104.21.80.152

200 OK

12 kB

URL GET HTTP/3
ltj.soapauth.top/js/_rtc.e5ad2fb2.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (12222), with no line terminators
Size
12 kB (12222 bytes)
Hash
08fa453bca5f1e6ce8580de948e34a66
5f2fac26eafc0ee9a511554ab1fa84545a448215
15c602b670b6359a69967fca6788325db8a163e3ede3f336ccda3dce12322084

HTTP Headers

GET /js/_rtc.e5ad2fb2.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-2fbe"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qTW4F%2F5J81bKz%2BMuBQ30ZNTol2wK1ynJf3CKct2XEAwnSdLIHQaoxGgItdWZ2hypx1glIuG8YDndGdzwLn99C3bSe4iJpzxe17fJs69HrWSFNrp2DFN%2Bvr3iJp2rc0j1xxgs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe4a5c1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-2.webp

104.21.80.152

200 OK

1.1 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-2.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.1 kB (1104 bytes)
Hash
cd20c1e86fd66d301b6e35a97af461fd
3f92712ef775681d59dfd96bb9b6429227a944e9
0d5556f5acd9a72ca66c6bfab3d813e35f504dcf73e6e6baca816da78a8fbad0

HTTP Headers

GET /img/comments/person-2.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1104
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: "65731759-450"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2inQX7h7ATkXMIr8fsGwnZNQ9myq1x1164uabqGXqBjIJl%2F3uMkvh0tTNH5OSt3bgPhIu%2BuYzwbv9jqJum9MWY3EeTMl2VYlaNhTiswPWmEveG8FQfZKGhHNPhAqt84mQwZU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43029d481c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-possibleStandardNamesOptimized.js.b6b6d3d0.js

104.21.80.152

200 OK

7.6 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-possibleStandardNamesOptimized.js.b6b6d3d0.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (7923), with no line terminators
Size
7.6 kB (7577 bytes)
Hash
43be2d355d30d9b00ffd0eda698b241e
91d1a201a08f18d90f7a1a59139f8da0429b396e
0e66b83f65192a06d3fc60c3d853db467c39458b4352ec0ed0f0d07a499bdd83

HTTP Headers

GET /js/v-possibleStandardNamesOptimized.js.b6b6d3d0.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-1d99"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hL%2Bel2eMsp7vtNnjvNa3KL4KYIIpCa6lTc2NGRAL4YkPA9Tcj7%2FgUoPN4InH1hzQiYGWhLo9f4RGe57kfwXaAcu3jVsBNSg9u%2BnsXOruu6I6Fv%2BcZ0ZJoIjeSgOy1bcnQ2Bj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c831c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-domparser.js.858d3ec4.js

104.21.80.152

200 OK

1.7 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-domparser.js.858d3ec4.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (1772), with no line terminators
Size
1.7 kB (1720 bytes)
Hash
2d0610e2adf786e5c94a3ac5dfac3655
09290f6ce9fb5104be3e87df270fd1bdc7989119
3a08900d94f25ca532e75e795c381d33b09f2bdbf47f5078978366f098076be5

HTTP Headers

GET /js/v-domparser.js.858d3ec4.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-6b8"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tBEXFWFrvQVfrfI83MANLeu2YKD2BxN8CoBN5VK32AFp8IWEtbc8rWWU58wClZXkQoFz%2FFF6oOIHL6sTTBAakGTgq%2F8bjRNHI0hnndj2zPXH9MGp1zc3%2FC%2BEopXu%2Bmew40mJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c851c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/finance-survey.html

104.21.80.152

200 OK

7.8 kB

URL User Request GET HTTP/2
ltj.soapauth.top/finance-survey.html
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - HTML document text - exported SGML document, ASCII text, with very long lines (8100), with no line terminators
Size
7.8 kB (7816 bytes)
Hash
00314feddd5fc20629a3443395c0a75e
d59bf850c8cc926e7025832bc01209492439ceb0
4117bc00a2573390ad590a7c94497e8670d05de4440dc92990ffd455a689f578

HTTP Headers

GET /finance-survey.html HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 11 Dec 2023 08:12:16 GMT
content-type: text/html
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HGtvQ%2BiOW%2FRFR3zmp8Wx8QZC0ULLG4UhCMjykg7CoGJ0AySJCNwEOmtXTjPEHAvBqJ%2BPsDzGnZ%2FoXwsngl6ITogIN9a30w2bCfd%2FTdilUSO38NE4568NcJzbW3dDDqU3zCT0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fb7ecd5685-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

ltj.soapauth.top/js/config/data/sd-1203056.js?v=10

104.21.80.152

200 OK

8.0 kB

URL GET HTTP/3
ltj.soapauth.top/js/config/data/sd-1203056.js?v=10
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (8495), with no line terminators
Size
8.0 kB (7990 bytes)
Hash
12431367966944827c4c2ae11ca2109c
6d849c10d9d47ce67b7d51a5cd4fed0dc23136c2
f16757b712b32bc30731546035f271087fbec831338b54f6cac5c6f88b0425ac

HTTP Headers

GET /js/config/data/sd-1203056.js?v=10 HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-1f36"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sw46NjO3UQ%2B%2BIghXJNzE1%2FfeXVG4zLdo7w%2B%2BU1EX%2FFa6226Ypzz03hssheNTMdmmiwMyIB8Un2%2F6H7vVxLvZaELj%2Bwfi8mJRMwI3wxWYrb5FdzHENjwPKG4L1itngI2hIC0u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43008bff1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/img/comments/person-13.webp

104.21.80.152

200 OK

1.9 kB

URL GET HTTP/3
ltj.soapauth.top/img/comments/person-13.webp
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp - data
Size
1.9 kB (1888 bytes)
Hash
ad1e0d431ec5fcb9a1e7ba8680d14a21
0f30fc9c7a5460458fb1e01acff03df4d5809950
45f8553b96fbe562a88e1366e8986d14b4d51f7d069604f8d29675844a19b204

HTTP Headers

GET /img/comments/person-13.webp HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/webp
content-length: 1888
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: "65731757-760"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GbB35jlZ2tBBeky%2BVhzKDMl9pTem7j0DFH1keH4bNKe3JC6DE3ZybsD3XHRdCl3hdwqBPruOQeJeTm1V63wFiUJb8Snwjh8Q%2B0RFQ4ZJMYGYjbYwIXTgPfOwZs65Dfx%2FPBHE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c4302bd5a1c02-OSL
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-index.js.62b8985c.js

104.21.80.152

200 OK

41 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-index.js.62b8985c.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (40911)
Size
41 kB (40988 bytes)
Hash
ee4b57cd28ecfd9347721d234a0824b5
646887572fad9ebb8a6935d7640d14958fd7160c
f1fc58f4984aeec5ec67cd9e1325af671f4c5f1e944741056a86c5427cc6f184

HTTP Headers

GET /js/v-index.js.62b8985c.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-a01c"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DYbyb2feDGVZNaaegwwG0V4FuB9pWwvjg0W2OaXyfouCm3urlb%2B9578%2BSc4IwX9XRrA4oWLDPX1th0erNDj7MljSHxtT6Hw1R69yISmqUjAyZFafbL4or2nWWBEyX15%2BTTET"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe4a601c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-redux-toolkit.esm.js.1cbc70bc.js

104.21.80.152

200 OK

11 kB

URL GET HTTP/3
ltj.soapauth.top/js/v-redux-toolkit.esm.js.1cbc70bc.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (11319), with no line terminators
Size
11 kB (11319 bytes)
Hash
8238073807a61f3f047f3a080389e7b0
043568860166b46e6da8dc636fbe0fc37025fb4b
f799eed81096e02f82c2816a45ef960daa43eb7250e56cdf5db69d634cb0fe07

HTTP Headers

GET /js/v-redux-toolkit.esm.js.1cbc70bc.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-2c37"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KMdD6uA2RSsB5XPfJVU%2FnuYfphJyqtO3sZKeBuM5s66M8a2lKf5N8UT5af9nxQ1duHg1fwMdVfTR9K4wbdHTD8d55CUy308TuSFKLlfwQ59mEkvs0XcNo%2F48uUBmJIT51Cf8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a661c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/v-attributes-to-props.js.4ec58b35.js

104.21.80.152

200 OK

702 B

URL GET HTTP/3
ltj.soapauth.top/js/v-attributes-to-props.js.4ec58b35.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (718), with no line terminators
Size
702 B (702 bytes)
Hash
214183ab1ec5a07a5a22d7c6de0e26a8
188d3f6b05452d044890f1d5acdae8b4f498f93d
47d44188e9ce585ef7f0722ef23d9dcd378e8a3d01bd3e2b4a9f7c44d6338b4a

HTTP Headers

GET /js/v-attributes-to-props.js.4ec58b35.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-2be"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NepQNVAOwiCPmAwtbcLh50oN7mMVZws5tdGKf6lmR3pqgdypG4TTsK%2FTQM9NAfPXy40DRocub6saU2gDH9CNncAuYxur5YKs3tL%2BGMfuXJ8ZyRMFs8YJ53ovhFf7bTnsSKwN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c891c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/js/SurveyContainer.ce0c83a8.js

104.21.80.152

200 OK

55 kB

URL GET HTTP/3
ltj.soapauth.top/js/SurveyContainer.ce0c83a8.js
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with very long lines (54556)
Size
55 kB (54638 bytes)
Hash
a35ec98ed60a7d52917e11817ac0ac3b
8d9853f271b5c0a8ffe16d63d697fdfefc21f082
5234329a79b19dfd57e68dcc7f9295474635703683f30f4a9889baf828a4e824

HTTP Headers

GET /js/SurveyContainer.ce0c83a8.js HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: application/javascript
last-modified: Fri, 08 Dec 2023 13:17:11 GMT
vary: Accept-Encoding
etag: W/"65731757-d56e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ATYEyajclz%2BagYqNmM8QPUpN%2FZXc0HziuPK240Hda4ZLLF1SqHIVGdwdZv%2F9Xr380diHjKM8DLH2z%2FwwSbpG%2FVpWkkvJyBkQGdNSpOBYNG4kmiREIAihliAlGoDueQ2g6AE6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43018c8d1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/css/_core-survey.d3ac2ee0.css

104.21.80.152

200 OK

84 B

URL GET HTTP/3
ltj.soapauth.top/css/_core-survey.d3ac2ee0.css
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
ASCII text, with no line terminators
Size
84 B (84 bytes)
Hash
6a5389a102082103af302d75143e0dee
973aca6dfe59e2ffa6c60e28c38990c1eab24480
bbe86a1b8677d7959eb23b92c572e154a0067ad5263844e40f95d018857630fb

HTTP Headers

GET /css/_core-survey.d3ac2ee0.css HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: text/css
last-modified: Fri, 08 Dec 2023 13:17:13 GMT
vary: Accept-Encoding
etag: W/"65731759-54"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=byGG8nAn13F6Z12YUG805yaCbmwmincGknq4gYxm0poUmCr52Cr%2Fcq%2FFMRVNucBw1vsz7NPaWNo9IukZkGXv%2FUluXoY13o5SC4TfIGRE8NZv7%2BIlPbufpHLoKxBeYH1vdHKO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c42fe5a6c1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

ltj.soapauth.top/favicon.ico

104.21.80.152

200 OK

1.2 kB

URL GET HTTP/3
ltj.soapauth.top/favicon.ico
IP
104.21.80.152:443
ASN
#13335 CLOUDFLARENET

Requested by
https://ltj.soapauth.top/finance-survey.html
Certificate
IssuerLet's Encrypt
Subjectsoapauth.top
Fingerprint5B:D6:3A:66:72:EB:41:A4:98:38:F9:AD:90:5B:42:82:9B:F3:BE:B1
ValidityThu, 30 Nov 2023 09:14:26 GMT - Wed, 28 Feb 2024 09:14:25 GMT

File type
MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel - data
Size
1.2 kB (1150 bytes)
Hash
668ba1a9fa1890ba16cb8adc28d3dad8
5e35223b2541265114eaf61b9da2556c812fea17
7746cf1b553433822522f2dc432f55fe64eee1f1cf823ef6adfde02e58e1d7e2

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ltj.soapauth.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=m34dpgr1hmts2z73h96r9pvkcvmlmci8; syncedCookie=true; oaidts=1702282337; ID=m34dpgr1hmts2z73h96r9pvkcvmlmci8
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Mon, 11 Dec 2023 08:12:17 GMT
content-type: image/x-icon
last-modified: Fri, 08 Dec 2023 13:17:12 GMT
vary: Accept-Encoding
etag: W/"65731758-47e"
strict-transport-security: max-age=1
x-content-type-options: nosniff
cache-control: max-age=1800
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1zlXNr2LQs%2FmfD0xCsxmkDWiIOFAEYYp7imHm6GL0psoI4iweMIpN%2FLurvlYFWJ0grtRQO1CCPJZXqIh%2FAeEabxTanZcJMnlXpNPnhiD6kZRU9iEoL19A%2B%2FuIIJ%2F%2FUbrr%2BDI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 833c43025d1a1c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (32)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by