| www.highcpmgate.com/ie071ryx?fr=0&in=false&key=3a3118c10d508ee45772fc49fe89fa29&pii=&pst=1715872570&refer=https://veristrecked.com/&rmtc=t&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&shu=549b4c6785fcd181de782a1a0c38e55c071492ae02277ac129d6b9acc362798299126aec9bc74fb52e23ab7d0d2cb2a6e659616ae33e0180c38a4bb273692356f68e478107381335e2fab599c3ffda56ee6aea3906a8523fee9f79c317101d&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&uuid=4644d3f3-3c45-4c13-b5d4-4d8af5f10a88:2:1 |  192.243.59.12 | 307 Temporary Redirect | 0 B |
URL User Request GET HTTP/1.1www.highcpmgate.com/ie071ryx?fr=0&in=false&key=3a3118c10d508ee45772fc49fe89fa29&pii=&pst=1715872570&refer=https://veristrecked.com/&rmtc=t&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&shu=549b4c6785fcd181de782a1a0c38e55c071492ae02277ac129d6b9acc362798299126aec9bc74fb52e23ab7d0d2cb2a6e659616ae33e0180c38a4bb273692356f68e478107381335e2fab599c3ffda56ee6aea3906a8523fee9f79c317101d&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&uuid=4644d3f3-3c45-4c13-b5d4-4d8af5f10a88:2:1 IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjecthighcpmgate.com FingerprintE7:53:32:23:DA:D6:BE:EB:98:90:05:4B:AC:AC:8C:89:F2:4D:FB:2E ValidityFri, 19 Apr 2024 10:31:16 GMT - Thu, 18 Jul 2024 10:31:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ie071ryx?fr=0&in=false&key=3a3118c10d508ee45772fc49fe89fa29&pii=&pst=1715872570&refer=https://veristrecked.com/&rmtc=t&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&shu=549b4c6785fcd181de782a1a0c38e55c071492ae02277ac129d6b9acc362798299126aec9bc74fb52e23ab7d0d2cb2a6e659616ae33e0180c38a4bb273692356f68e478107381335e2fab599c3ffda56ee6aea3906a8523fee9f79c317101d&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&uuid=4644d3f3-3c45-4c13-b5d4-4d8af5f10a88:2:1 HTTP/1.1
Host: www.highcpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Thu, 16 May 2024 15:15:23 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://www.highcpmgate.com/ie071ryx?fr=0&key=3a3118c10d508ee45772fc49fe89fa29&refer=https%3A%2F%2Fveristrecked.com%2F&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&dlrt=t
Set-Cookie: u_pl=23212570; expires=Fri, 17 May 2024 15:15:23 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 38c4a1219082b4f5c6802b262e812a03
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| www.highcpmgate.com/ie071ryx?fr=0&key=3a3118c10d508ee45772fc49fe89fa29&refer=https%3A%2F%2Fveristrecked.com%2F&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&dlrt=t | 192.243.59.12 | 302 Found | 0 B |
URL User Request GET HTTP/1.1www.highcpmgate.com/ie071ryx?fr=0&key=3a3118c10d508ee45772fc49fe89fa29&refer=https%3A%2F%2Fveristrecked.com%2F&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&dlrt=t IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjecthighcpmgate.com FingerprintE7:53:32:23:DA:D6:BE:EB:98:90:05:4B:AC:AC:8C:89:F2:4D:FB:2E ValidityFri, 19 Apr 2024 10:31:16 GMT - Thu, 18 Jul 2024 10:31:15 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /ie071ryx?fr=0&key=3a3118c10d508ee45772fc49fe89fa29&refer=https%3A%2F%2Fveristrecked.com%2F&sh2=726&sh3=726&sh4=726&sh5=848&sh6=1081.1999797821045&sh7=800&sub1=pb&sub2=158AFC70-1397-11EF-8783-1BE80966B359&sw2=1498&sw3=1498&sw4=1498&sw5=1506&sw6=1920.149964094162&sw7=1506&dlrt=t HTTP/1.1
Host: www.highcpmgate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: u_pl=23212570
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Thu, 16 May 2024 15:15:23 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://hot-survey.com/survey/dating/proxy3/
Set-Cookie: backurled=3a3118c10d508ee45772fc49fe89fa29; expires=Thu, 16 May 2024 15:16:23 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5094ded16897f783b5b8fbfcadbeb9e8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| hot-survey.com/survey/dating/proxy3/css/main.css | 172.67.172.150 | 200 OK | 184 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/css/main.css IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typegzip compressed data, from Unix Size184 kB (184380 bytes) Hash8971672ace6f812c9c9f7f9a180ec0b3 6899bc5ef6324d27e62b353231104cfb5ed09d1e 2a80b28161eae310c996186a1f3486e672ea56697ee4abb475ce100dcf610cb2
GET /survey/dating/proxy3/css/main.css HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 16 May 2024 15:15:24 GMT
content-type: text/css
last-modified: Sat, 06 May 2023 11:55:55 GMT
etag: W/"6456404b-f57"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 1378148
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5teo%2FOPPRCLeN7vSuVerC2ypjCEuThsZpaA3Be7rH1%2FQgrKePd%2Bn00zgZidtJiwLaOyfO3CU3w6alpnq0zd9ivTNI9nj7M2q47UF%2BY3fEZPCOb%2FVRbYTMEjCiwfu1GhsRA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52ac0c91712f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hot-survey.com/survey/dating/proxy3/js/jquery.min.js | 172.67.172.150 | 200 OK | 46 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/js/jquery.min.js IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typeJavaScript source, ASCII text, with very long lines (32025) Hash4a356126b9573eb7bd1e9a7494737410 8258d046f17dd3c15a5d3984e1868b7b5d1db329 22642f202577f0ba2f22cbe56b6cf291a09374487567cd3563e0d2a29f75c0c5
GET /survey/dating/proxy3/js/jquery.min.js HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 16 May 2024 15:15:24 GMT
content-type: application/javascript
last-modified: Thu, 11 May 2023 12:26:07 GMT
etag: W/"645cdedf-1499c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1364562
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fh04e7g%2Fl7b1fIlKwtuOBf01JAR%2BPhEqXymR%2FooxwmqoEUWCkQr2uvK51Bwf6ce4YqIuVhj1puavfUyRq2phdig2V8ozCbe3TGevnkWrupV9MKTpbUUWblHSHU9zlwzU3g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52ac0c93712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| hot-survey.com/survey/dating/proxy3/ | 172.67.172.150 | 200 OK | 7.8 kB |
URL User Request GET HTTP/2hot-survey.com/survey/dating/proxy3/ IP172.67.172.150:443
CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typeHTML document, Unicode text, UTF-8 text Hash822e156cc66b14bb46f0dc361e1f7f5d 4d732394f994c775295a3a32d98106f3c6e45842 8a8c24d7df2b47720592c8322f75ae846c3e7994eea22270fa81c453611f27da
GET /survey/dating/proxy3/ HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 16 May 2024 15:15:23 GMT
content-type: text/html
last-modified: Fri, 19 May 2023 11:05:19 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000, public
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kAWYG15f6VBYHyCFaXYaXRpMafCSJh7BrJZWGl9zgVzq%2FAqZwZKZJkka5ztT7fuHvlAPEExlF1y8ENz%2BkvYcrKa%2B59mWfiQu5O%2F796ISt4thyfgG5VLFx3sjogdhEsnX%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 884c52a8e93e0afe-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| hot-survey.com/survey/dating/proxy3/css/survey-dating.css | 172.67.172.150 | 200 OK | 14 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/css/survey-dating.css IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typegzip compressed data, from Unix Hashdef8703090438c8880bb2da73f4efbd4 99d87f1228c71adbaf5f1ab65cafae8dfda3cf6f af8712e88729f8a42219139abe88bf08722d232e982b282f094deedd5f3ccf5a
GET /survey/dating/proxy3/css/survey-dating.css HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 16 May 2024 15:15:24 GMT
content-type: text/css
last-modified: Sat, 06 May 2023 11:55:55 GMT
etag: W/"6456404b-74a8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
cf-cache-status: HIT
age: 1364561
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ug82%2B2xvoFWXKd8fuzOxQDjOmMBac8eiozxNYhM9iScp3j%2BEvgRVgkgofa0TyQNWo19Dg2U3ZbeUxUevl5098rX8Zx7SEdFh3O8%2Bf8BG48LENNy3IzevY5icIFugB0z0MA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52abfc8e712f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hot-survey.com/survey/dating/proxy3/assets/favicon.ico | 172.67.172.150 | 200 OK | 7.5 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/assets/favicon.ico IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typeMS Windows icon resource - 1 icon, 32x32, 32 bits/pixel Hashd3efa52334c87578cb9d6eb635b0f37a 7111cef6d61cd128ba49ab537ac6c360d433d8dd b5dc1e3363741f835cc918949f2d4718a6d1b3aa2f2d4aae63b23bef311c08a2
GET /survey/dating/proxy3/assets/favicon.ico HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 16 May 2024 15:15:24 GMT
content-type: image/x-icon
last-modified: Sat, 06 May 2023 11:55:53 GMT
etag: W/"64564049-10be"
cache-control: max-age=14400
cf-cache-status: HIT
age: 2974
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UdcHnHnhaig3N0EBKZsf6kLGRPd0PoXvTqaECrAQLFfvrVpv1vnGVIOfr1rF%2BnEhc4uWCEyoRbFT2L2%2BWo2kk5RZ3LSws7SfUpB%2B1EpJHWET%2F2cD%2BjpGdiv9UfxSNJj%2BTQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52adcee0712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 | 142.250.74.67 | 200 OK | 16 kB |
URL GET HTTP/2fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 IP142.250.74.67:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subject*.gstatic.com Fingerprint15:DD:05:B3:2F:D8:E3:54:C9:B4:FA:E4:AC:01:ED:C8:E1:EA:A7:AD ValidityTue, 16 Apr 2024 04:17:07 GMT - Tue, 09 Jul 2024 04:17:06 GMT
File typeWeb Open Font Format (Version 2), TrueType, length 15740, version 1.0 Hashb9c29351c46f3e8c8631c4002457f48a e57e59c5780995ff2937ab2b511a769212974a87 f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://hot-survey.com
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 May 2024 02:32:46 GMT
expires: Fri, 16 May 2025 02:32:46 GMT
cache-control: public, max-age=31536000
age: 45758
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| hot-survey.com/survey/dating/proxy3/assets/4.mp4 | 172.67.172.150 | 206 Partial Content | 70 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/assets/4.mp4 IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typeISO Media, MP4 v2 [ISO 14496-14] Hash7601feaee9026facaeaa5512cef37124 12652699722ee1421d41e6f5ab217cac1701df20 e2b169459a0243f4858405ed0dce55f3c8c2f53770d8b5d9ff31548db04e0cc6
GET /survey/dating/proxy3/assets/4.mp4 HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Thu, 16 May 2024 15:15:24 GMT
content-type: video/mp4
content-length: 1264920
last-modified: Sat, 06 May 2023 11:56:08 GMT
etag: "64564058-134d18"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1374392
content-range: bytes 0-1264919/1264920
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=m2iWmX1%2B1ZGDBxrsJaOSDXLtujm85sLHuz2%2BmEkkE3cZPcgmZK4P8hRSvxWoh3KYEFTtE8XABDuNbv1oswCF7JCBaHOUS10b2FzaHewX6LIB7phmizfRGHH%2BjAMnwpA2cQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52ad0dc6712f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hot-survey.com/survey/dating/proxy3/assets/4.mp4 | 172.67.172.150 | 206 Partial Content | 20 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/assets/4.mp4 IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
Hash24da81e184f1a55d0bc90c8d78a68b11 08ac6d97aa661a359421304bc516f63186f996e1 15cefddf25416952222872f5e7c9ab63dbd2c7eba5464deffd01569563aacafc
GET /survey/dating/proxy3/assets/4.mp4 HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=1245184-
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 206 Partial Content
date: Thu, 16 May 2024 15:15:24 GMT
content-type: video/mp4
content-length: 19736
last-modified: Sat, 06 May 2023 11:56:08 GMT
etag: "64564058-134d18"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1374392
content-range: bytes 1245184-1264919/1264920
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i2GVQC3UhHjynARpEUD9Kl0hYoi%2BAjisL%2BDYgs1ykjGTwSFNZr9brWv8TozxZIlNOJjkhYkTJVQ%2FYmUFGZmseG6njHZAUdwltIo9eF7KxKHfC%2Fuqzh%2Fz%2BojLgcqQku1uOA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52ad2df8712f-OSL
alt-svc: h3=":443"; ma=86400
|
|
| hot-survey.com/survey/dating/proxy3/js/survey-dating.js | 172.67.172.150 | 200 OK | 9.6 kB |
URL GET HTTP/3hot-survey.com/survey/dating/proxy3/js/survey-dating.js IP172.67.172.150:443
Requested byhttps://hot-survey.com/survey/dating/proxy3/ CertificateIssuerGoogle Trust Services LLC Subjecthot-survey.com Fingerprint46:B6:68:92:68:C9:9E:14:EA:F2:E2:85:4D:29:BB:8F:EA:4B:9A:A2 ValiditySat, 13 Apr 2024 21:30:00 GMT - Fri, 12 Jul 2024 21:29:59 GMT
File typeASCII text, with very long lines (10191), with no line terminators Hash936212a9ab821820b5bf9424aa76ee4e 79a3370616c28af3a80dc870402a66f565c00806 2b1a77442c9ff32b7b2a3ef8b3408c56b1247ca7230e387fbcaad5ad69267de4
GET /survey/dating/proxy3/js/survey-dating.js HTTP/1.1
Host: hot-survey.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://hot-survey.com/survey/dating/proxy3/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 16 May 2024 15:15:24 GMT
content-type: application/javascript
last-modified: Fri, 19 May 2023 11:12:43 GMT
etag: W/"646759ab-25a5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 736042
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=soOAGSMQaV%2BZCY0aHOpsvwTtN4mnIjG%2BF2bYBkb4sR3FSgofBFCEhk1Eo9S5W6QuNHtWzuK%2Bp3QHkQl81DP1CRNwMfJfUBy6p6hJoumJ5agus2oEcxb3gtY79LuecIkE0g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 884c52ac0c94712f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|