| waterfallchequeomnipotent.com/i128sdxrg?adb=n&adb=n&dev=r&exlwkl=2&key=87a87e0a95ebe3ea29b7978c7a63f354&kw=[videos,-,search,results,for,%E3%82%B3%E3%82%B9%E3%83%97%E3%83%AC,-,tokyo,motion]&psid=www.tokyomotion.net,www.tokyomotion.net&refer=https://www.tokyomotion.net/search?search_query=%E3%82%B3%E3%82%B9%E3%83%97%E3%83%AC&search_type=videos&type=public&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=9&uuid=37284539-5efe-432c-a0a7-8359f915949b:1:1&v=24.4.6923 | 172.240.127.234 | | 1.8 kB |
URL waterfallchequeomnipotent.com/i128sdxrg?adb=n&adb=n&dev=r&exlwkl=2&key=87a87e0a95ebe3ea29b7978c7a63f354&kw=[videos,-,search,results,for,%E3%82%B3%E3%82%B9%E3%83%97%E3%83%AC,-,tokyo,motion]&psid=www.tokyomotion.net,www.tokyomotion.net&refer=https://www.tokyomotion.net/search?search_query=%E3%82%B3%E3%82%B9%E3%83%97%E3%83%AC&search_type=videos&type=public&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=9&uuid=37284539-5efe-432c-a0a7-8359f915949b:1:1&v=24.4.6923 IP172.240.127.234:0
File typeHTML document, ASCII text, with very long lines (996) Hash910507ce0e97d5d9ded44aa56c9e773c d7cbe48cc7b169673b4a02101bc8530db754cbe3 a127477d70cf6c198d5fefa847eb897f52477b390f9453eac264b198c0ca99a1
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /i128sdxrg?adb=n&adb=n&dev=r&exlwkl=2&key=87a87e0a95ebe3ea29b7978c7a63f354&kw=[videos,-,search,results,for,%E3%82%B3%E3%82%B9%E3%83%97%E3%83%AC,-,tokyo,motion]&psid=www.tokyomotion.net,www.tokyomotion.net&refer=https://www.tokyomotion.net/search?search_query=%E3%82%B3%E3%82%B9%E3%83%97%E3%83%AC&search_type=videos&type=public&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=9&uuid=37284539-5efe-432c-a0a7-8359f915949b:1:1&v=24.4.6923 HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 04:37:36 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=18007441; expires=Wed, 08 May 2024 04:37:36 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.IxMzwoaA_p2Fo5Z5PO5Do61VRj5xBh8Yqwb-ttYzOmE; expires=Tue, 07 May 2024 04:38:36 GMT
uid_id2=37284539-5efe-432c-a0a7-8359f915949b:1:1; expires=Tue, 14 May 2024 04:37:36 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 9df8665da6ce3242574e44c10674adf8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| waterfallchequeomnipotent.com/api/users?token=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&uuid=37284539-5efe-432c-a0a7-8359f915949b%3A1%3A1&pii=&in=false | 172.240.127.234 | 302 Found | 0 B |
URL User Request GET HTTP/1.1waterfallchequeomnipotent.com/api/users?token=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&uuid=37284539-5efe-432c-a0a7-8359f915949b%3A1%3A1&pii=&in=false IP172.240.127.234:443
CertificateIssuerLet's Encrypt Subjectwaterfallchequeomnipotent.com Fingerprint10:02:FD:E1:42:43:0C:C7:37:B0:94:C6:F9:9A:80:1F:38:80:C0:6E ValidityTue, 23 Apr 2024 10:44:53 GMT - Mon, 22 Jul 2024 10:44:52 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=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&uuid=37284539-5efe-432c-a0a7-8359f915949b%3A1%3A1&pii=&in=false HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://waterfallchequeomnipotent.com/api/users?token=L2kxMjhzZHhyZz9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTE4MDA3NDQx
Cookie: u_pl=18007441; ain=eyJhbGciOiJIUzI1NiJ9.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.IxMzwoaA_p2Fo5Z5PO5Do61VRj5xBh8Yqwb-ttYzOmE; uid_id2=37284539-5efe-432c-a0a7-8359f915949b:1:1; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.21.6
Date: Tue, 07 May 2024 04:37:37 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://holdhostel.space/?6622842d7176c&ag_custom_domain=18007441
Set-Cookie: uid_id2=37284539-5efe-432c-a0a7-8359f915949b:1:1; expires=Tue, 14 May 2024 04:37:36 GMT
iprc3c284121d5b91e34b6fe8f9a1c348d01=5188702; expires=Wed, 08 May 2024 04:37:37 GMT
pdhtkv=true; expires=Wed, 08 May 2024 04:37:37 GMT
uncs=1; expires=Wed, 08 May 2024 04:37:37 GMT
pdhtkv28=true; expires=Wed, 08 May 2024 04:37:37 GMT
uncs28=1; expires=Wed, 08 May 2024 04:37:37 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 386dca3c637276af71fa3a5afdf2ae01
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| waterfallchequeomnipotent.com/favicon.ico | 172.240.127.234 | | 0 B |
URL waterfallchequeomnipotent.com/favicon.ico IP172.240.127.234:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: waterfallchequeomnipotent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://waterfallchequeomnipotent.com/api/users?token=L2kxMjhzZHhyZz9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTE4MDA3NDQx
Cookie: u_pl=18007441; ain=eyJhbGciOiJIUzI1NiJ9.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.IxMzwoaA_p2Fo5Z5PO5Do61VRj5xBh8Yqwb-ttYzOmE; uid_id2=37284539-5efe-432c-a0a7-8359f915949b:1:1; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Tue, 07 May 2024 04:37:37 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4b664528bb2a15c4a59580d0169f4e5f
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn1.png | 104.21.58.193 | 200 OK | 6.9 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn1.png IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hasha67051906425835b13dc4292c6fe2ef7 c96b01fb21c60a17fad9e89f235fdb8809ffc43d f000409df7dd5222fc51cc35113519a133596c011f61bc5a7f65f9dcd2843a37
GET /lg/lg_0324/land_lg_140324_en/image/btn1.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: image/png
content-length: 6866
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-1ad2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4779
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1GduzRDTwmsIub5A0IFg3pn9DE6n0EOgz29S3c0cSRBE6dsod75kc3LFJVhUeRs9J1gLN41m40yDrqBbt%2FA4l2zQ0Xzi4j%2BcGbkzIdVDQCrqwltyz2cOtJOiWzAyAfkj0yr6ouF6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe840e7b47b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn2.png | 104.21.58.193 | 200 OK | 9.8 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn2.png IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hash8c7c430e736c07b069cf61a2870c7254 a1b6cf722997131aa569f2214df2ce8a9e6e5630 42269355807fe5c4d7dabbccff1cc602725b5ffccae86759412219b83198a180
GET /lg/lg_0324/land_lg_140324_en/image/btn2.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: image/png
content-length: 9771
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-262b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6149
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fp%2F1eqFUhXm9RsGoP4h3mtSYXIbqTOi6GYHQIcthcBngfSb6bXxOUIxGp6G6iB7LCTjrPMdzxKAOQUsvcCEsnyVIAGhyJufNv57lKK%2BhPIm%2BZY1axuC4cSxS%2FK9z8PEIwu6L0Q1X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe840e7b4ab515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/awpx_click.js?v=005 | 104.21.58.193 | 200 OK | 1.1 kB |
URL GET HTTP/3theeverydaygame.com/awpx_click.js?v=005 IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
Hash7aeb87811ad3a82fde3e2783544819ee d1d9174cbcbb1abdccee6841f170ba21f899925b 7fff603702e9bea03cf47ba47947bb7f8655eb7fcb1c8f7091e9a38d8f5d949c
GET /awpx_click.js?v=005 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 09:49:36 GMT
etag: W/"6409abb0-5d2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3159
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VK8oENYTOUORA%2FJi%2Bbln7VXAX%2B4jmRsXrj4Bu7MQqtYIAIs0hucs5mEuT03Qd9fzAnC9zNXCElReD8x5WbAnwnzwgMQw59nXoeWXw69N3y5hBAiIE81WIAllZSyyKox3psKrTZw1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe840e7b46b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/scripts/main.js | 104.21.58.193 | 200 OK | 12 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/scripts/main.js IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJavaScript source, ASCII text, with very long lines (521), with no line terminators Hash86f0754abfb6014908e557e6e268f3e2 4efa8a0c962e30bb7e314ad37a3f2c55b91052e6 70910209572bcf5a0ba1022d53bb9fe24d82ed842370c70234994dd2b29ba1a9
GET /lg/lg_0324/land_lg_140324_en/scripts/main.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:38 GMT
etag: W/"65f0845a-209"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U8Av5TirqrQhFuYBdcmkuvcOFMzox%2BsxSnBPeTN4YYUgGvR3J%2FC9zoOXeGIPyNC3eE4Q6WOfyMXxGxeqIpqe0%2BnnPqyTGeBMROpxIB1LNN%2BbfE9JDdPL%2FrnuIMZIkv5H%2BJIItPL7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe840e7b4cb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| ln.gamesrevenue.com/px1.js | 5.161.79.44 | 200 OK | 88 kB |
URL GET HTTP/2ln.gamesrevenue.com/px1.js IP5.161.79.44:443 ASN#213230 Hetzner Online GmbH
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subject*.gamesrevenue.com FingerprintB2:A3:99:AD:22:46:FC:93:41:E9:59:40:F5:09:B0:23:B7:5B:FA:67 ValidityWed, 13 Mar 2024 09:55:06 GMT - Tue, 11 Jun 2024 09:55:05 GMT
File typegzip compressed data, max speed, from Unix Hasha88c9946a6ffcabc015f8fa19b4ab13a 90f46164eed8ce33690f657a210c885cde93ecfe 8e6bb5c718a8583d6fdfb6e049a35189568e27600c07b288c4d3c6221e9c1c85
GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 04:37:37 GMT
content-type: application/javascript
last-modified: Fri, 22 Dec 2023 10:12:56 GMT
etag: W/"65856128-3b88"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_close.jpg | 104.21.58.193 | 200 OK | 40 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_close.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash3d830c378aa76c9caa82a73805459893 4a48546372f2ef6311cbed974d536273bcfdd711 8d88b039c0e88133bd2f53dc2fef48ea2d8bdae4eb6e3162fec9db714f97adea
GET /lg/lg_0324/land_lg_140324_en/image/g1_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 40179
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-9cf3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 5901
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cWqNMDrXqa%2BJ79PUzyMrrfy2NqAgYOufPODkWSBJseVWQBoQDkC%2BkHPBF%2F99D9M8WQsLUhDrKb5iQE6MF4NqFpw8aQXu8uz4V9%2BZ6ewESSvlaCe8504IyREgruKYQXjWkIa2DBMr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84110d25b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_open.jpg | 104.21.58.193 | 200 OK | 80 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_open.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash12e061b10b2c654a24ea704af3aaec43 9c506625e1fa700f0e6522cced2a53b0cde2bd54 d321fc26bb399bd642b1a3ae059a03308d286526e6b87a9cb37ba63833673372
GET /lg/lg_0324/land_lg_140324_en/image/g2_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 79598
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-136ee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aVK2I%2BBi3PEMVsg5FHcHNh43wPmy%2BLdeYIN2%2FZcrOJONWDwCb6vupWXk2lxLmXY6kQCCwYCnkgFiOjL9RL9mJ04wTL6XGT8Q2RD5QIGXjF5Dcf%2BD%2F%2BtUoowiWeZl1vbCprsC6A%2B3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84110d2ab515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_close.jpg | 104.21.58.193 | 200 OK | 42 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_close.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash955f59a0876a28b432c71c0d274727c7 789778a09f2fa8f8bd24be2bb781914f5070dd3d 40e8cd16f27d5d6a0cfd007881651ef8acd93ba95423c05741bc410454eabf40
GET /lg/lg_0324/land_lg_140324_en/image/g2_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 41478
last-modified: Tue, 12 Mar 2024 16:35:34 GMT
etag: "65f08456-a206"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1463
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KD%2B39YBjJSi67iN4F6FFozZ18uxqUBjuR6MzoooCiZO8hzTW7vFXEyCebaSkSbQ7Q3UfJzB%2Bd4%2BkIn9QzQC24n9sqWa6CZ0YJiRJne88OEzfeZjgrCY%2FTs7AqqwXPF6zC4bYXVKF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84110d33b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_open.jpg | 104.21.58.193 | 200 OK | 63 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_open.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashd837068776c28a251131d2c0138c5db4 bc8d3e395fa77a6b801f13d1c22ff159776cc430 a8364b19810c700ee3899c55089ca678291758ee0d62dbad821e2a6d73b08c93
GET /lg/lg_0324/land_lg_140324_en/image/g3_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 63206
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-f6e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1462
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=crMLZ9IlYbKXIaN0SSG59xE5LwpgAl42Oyn8IrQz0osm5nEGXHkbCeMlKsfuGKB3K9i%2Bvkoo2g1fZuTHZbloooAXIjt7VrNo5HS%2B733q3ia5zwmP6zzcB0%2BUK06w2xusJPTNtj9X"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84111d36b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_close.jpg | 104.21.58.193 | 200 OK | 41 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_close.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashaa7031c41077d720cfc935e8de98de95 47aaf9ec464983016d35bb8150928c7f96cdff8c 6a49dc8fe71fafd7db501c43d96537be26a508a2c8a932ff8f03746bc9a55a83
GET /lg/lg_0324/land_lg_140324_en/image/g3_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 40609
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-9ea1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YScpsNuf%2FhnwMXjoxI%2Fl2NA8bSRtnK8b%2Be6tp9q4o8j9sro9RUyDDGTocJuRFAl9wetgw7vf3YIQBOOc6u6b3fF73VDewXRSDvNMI97OgoKctzw1P1O6DsrW0nUsxySji4DEG36F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84111d38b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_open.jpg | 104.21.58.193 | 200 OK | 73 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_open.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashc37fec311feadcbd0c77987b383b0596 9a8f5df2805241f6bc484151dc31f3b72bb9a196 a61a23797d6b68ed79222d950596e90da320e59f8ee23e7eb776c94ee0d6734c
GET /lg/lg_0324/land_lg_140324_en/image/g4_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 72874
last-modified: Tue, 12 Mar 2024 16:35:36 GMT
etag: "65f08458-11caa"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XHkrg8RkXeMJBla5ZxkQzy%2Fv6OU7BqtzHC9DlGdr0wNclM60%2BXsZ7xQO4%2BulaK2RTxNY0mYKE4ZqlFjpdv2MKFo9ffGJQ8yaUz7g4DiomDWfEVH0BKUy6XSVhaeUUuJOC60tWm4J"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84112d41b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_close.jpg | 104.21.58.193 | 200 OK | 41 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_close.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash4735a029efd2d2e8b15fab5879842219 82ac18ec8aae9a2cc311cdb3b92862e56d161f99 11c0bdd5fc2ba1dfea6ccaedded312f27fd5d5ddf21f24ee607ad05c2c0f197b
GET /lg/lg_0324/land_lg_140324_en/image/g4_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 40656
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-9ed0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4441
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F6z3mfzFJVJfwhP85wBIrdUb5REjbQbUCqYJ6IxRGjCvum1naL%2FdGhBGOTnuquCUJy18OgzVbemCB4F4Zyv9%2B0oqyZk4th8YOt9PY4UumzMVDjyB%2BNAXuHAlBuxRXWuaRZk5JrE1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84112d42b515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/fav.png | 104.21.58.193 | 200 OK | 1.4 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/fav.png IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash10c5dd857fd3653492ef5eeaa86cd48b 193484a907a40d7b145af2136ef83bef593d2f21 a689201508b9dc7b2cc3049c7d89947f96a19790411506ecd6eb1875374fe329
GET /lg/lg_0324/land_lg_140324_en/image/fav.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/png
content-length: 1425
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-591"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4112
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I8TgpXfxEAaQUJhJifaUHNgJAlMfTrTt1Moh7q67yZmv6MGRiNF7l6ZOzfVfEet0oiybI48sPUDlhrGMJVX7DgUFio%2BPvTZ24Y3%2F0XFYIXv%2Fc%2FqAoWVqK5SRtVrT3f9W%2F7lqIUbI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe8411bdacb515-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 | 104.21.58.193 | 200 OK | 8.3 kB |
URL User Request GET HTTP/2theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 IP104.21.58.193:443
CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeHTML document, ASCII text Hashd3a5f036883cb39a863767cd4d330da8 b4ba12e328620bce04d81c354dcbef144035d56e d642fdddab3414841c9006bf04a9367fd8895de7f6cb22667cdefdf39e90f9af
GET /lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://waterfallchequeomnipotent.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AEjmlox%2FLGViGluPexmlK9W0rT9KEi2btsbtwO9WRNGqvqVDAw5ds%2B5FSXhIsUiTwp2lV55nvNGqErjONd91tsyvjyD6IivC90YhfKGvyMb1YHyP7WtuKEtcXpsohJeJDW%2FVKOSr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87fe840bcc5b569c-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css | 104.21.58.193 | 200 OK | 3.3 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeASCII text, with very long lines (3548), with no line terminators Hashaac1493fdaa516c07b05dc277adf9047 40c8ee3e4d54dfff6dcaea969bcad3d20ec9b796 8f9a48a298195eefb30fffd1c8d458eac7ecc2503a77ba8a5bc47bad68b61c37
GET /lg/lg_0324/land_lg_140324_en/css/main.css HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: text/css
last-modified: Tue, 12 Mar 2024 16:35:32 GMT
etag: W/"65f08454-ce3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 6149
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S%2Be0%2FojjNVbFAGS3eNx0fZA1ijgaPcxX3dNCOiTvrkzIH98tkOFdrP2nN5ZXGx%2FjzK48lXYDJRZLnqcpEwqT94d%2BzgqaVFWPPSLdRwavXu9kRwIWr5KsCRQ5vweEODVumID7%2FeN9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe840e6b3db515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| holdhostel.space/?6622842d7176c&ag_custom_domain=18007441 | 172.67.192.172 | 302 Found | 2.2 kB |
URL User Request GET HTTP/2holdhostel.space/?6622842d7176c&ag_custom_domain=18007441 IP172.67.192.172:443
CertificateIssuerGoogle Trust Services LLC Subjectholdhostel.space Fingerprint30:62:41:BC:7C:17:FC:EE:0D:5B:5B:39:AE:06:1C:8A:08:6D:67:D6 ValiditySat, 20 Apr 2024 18:12:17 GMT - Fri, 19 Jul 2024 18:12:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?6622842d7176c&ag_custom_domain=18007441 HTTP/1.1
Host: holdhostel.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://waterfallchequeomnipotent.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Tue, 07 May 2024 04:37:37 GMT
content-type: text/html
location: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
set-cookie: c_2022b6829ad3bc8a5d74a4bfe5cf4db8=1; Expires=Wed, 08-May-24 04:37:37 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
z_dd834028817d054ef3568898fa07ee8f=1; Expires=Wed, 08-May-24 04:37:37 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=YxCJVuk7ESMK0NNCnUtMHQK5wsdtdqRGvCxj2gQTHlpCnRgtVkZoO%2FoAHBbeUh5hGM1SeOGFMmiREPa1vc31SNm73%2FzAW5bmgY6XdWsCdsUacyWu8GIe0TlMyrvYNprOTHZ8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 87fe840b2895b512-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/libs/jquery.min.js | 104.21.58.193 | 200 OK | 87 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/libs/jquery.min.js IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /lg/lg_0324/land_lg_140324_en/libs/jquery.min.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:37 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:38 GMT
etag: W/"65f0845a-1538f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 4112
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8Ej8%2BcyDRT1zIZevjyxsQB5yeXBQhXfAaWU3s6FNAd%2Ft4SOcGfz7LfUxcmCJKRm5aVnKIDjkuUZ%2BVX%2FLkiSia3dIewc0PnVKTVWTGAw%2FA6IhBU7O4WCjeJ95tkKszfhCb5Tnbgjr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe840e6b41b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_open.jpg | 104.21.58.193 | 200 OK | 84 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_open.jpg IP104.21.58.193:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=18007441&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com FingerprintE1:71:71:8C:28:0C:89:C4:6F:BD:61:EF:AB:FE:37:B3:65:12:2B:39 ValidityMon, 29 Apr 2024 16:57:53 GMT - Sun, 28 Jul 2024 16:57:52 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hasha3efbcb7561dddaeb36ba22fb8fae56f a9363a7f6b6e9a5a6dcbb37a0abfa7bb3ab3ea1d d95424c3f3857c13ff9f6a957f805b188a568ce769b51ee9fe68c8fd3537b319
GET /lg/lg_0324/land_lg_140324_en/image/g1_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Tue, 07 May 2024 04:37:38 GMT
content-type: image/jpeg
content-length: 84260
last-modified: Tue, 12 Mar 2024 16:35:34 GMT
etag: "65f08456-14924"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1463
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LhAUxf48U%2Ba7E50FBt43xcpgUnvwT0UXz%2BgKj3NjOs1QNmqIrX3jhu7pGkxlDCN7UiYiWLZkf0MTmu6Pr3FIhW9Q8Spk8Zw1Ho%2BNq2yy3UpiKHcRCe7k5qDAwo8OSsXZmLgs6zcY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87fe84110d22b515-OSL
alt-svc: h3=":443"; ma=86400
|
|