| ultimatumrelaxconvince.com/ti38d0qmt?adb=n&adb=n&dev=r&key=d11e6b6be9084519097359628b670a82&kw=[%22busty%22,%22ema%22,%22-%22,%22busty%22,%22ema%22,%22-%22,%2210%22,%2202%22,%222024%22]&noh=85&psid=CF-2931_layer_1&refer=https://pornkinky.com/videos/17637/busty-ema-busty-ema-10-02-2024/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=1&uuid=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1&v=24.4.5334 | 192.243.59.12 | | 1.7 kB |
URL ultimatumrelaxconvince.com/ti38d0qmt?adb=n&adb=n&dev=r&key=d11e6b6be9084519097359628b670a82&kw=[%22busty%22,%22ema%22,%22-%22,%22busty%22,%22ema%22,%22-%22,%2210%22,%2202%22,%222024%22]&noh=85&psid=CF-2931_layer_1&refer=https://pornkinky.com/videos/17637/busty-ema-busty-ema-10-02-2024/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=1&uuid=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1&v=24.4.5334 IP192.243.59.12:0 ASN#39572 DataWeb Global Group B.V.
File typeHTML document, ASCII text, with very long lines (903) Hash34aee10f76c08d19fd6e8e35884c11cd 9f38454b1e47b35f78a24a88438d7966d3754469 f04bfda0e3dd66a202007b32f0827ac197b0a1c5fa15f856b4e384eed49c8f08
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /ti38d0qmt?adb=n&adb=n&dev=r&key=d11e6b6be9084519097359628b670a82&kw=[%22busty%22,%22ema%22,%22-%22,%22busty%22,%22ema%22,%22-%22,%2210%22,%2202%22,%222024%22]&noh=85&psid=CF-2931_layer_1&refer=https://pornkinky.com/videos/17637/busty-ema-busty-ema-10-02-2024/&res=14.31&scrHeight=1080&scrWidth=1920&ship=&sub3=invoke_layer&tz=1&uuid=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1&v=24.4.5334 HTTP/1.1
Host: ultimatumrelaxconvince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Thu, 25 Apr 2024 15:51:50 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16439388; expires=Fri, 26 Apr 2024 15:51:50 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.of3Mg7ePz5Jcxrgb_qTgxkK_Hl3rbUHkZZINovr3tJg; expires=Thu, 25 Apr 2024 15:52:50 GMT
uid_id2=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1; expires=Thu, 02 May 2024 15:51:50 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c6120c74bb9a331b04eeea526a670c31
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
|
|
| ultimatumrelaxconvince.com/api/users?token=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&uuid=f2570e4f-1899-4ee5-8f53-935c77d9d819%3A2%3A1&pii=&in=false | 192.243.59.12 | 302 Found | 0 B |
URL User Request GET HTTP/1.1ultimatumrelaxconvince.com/api/users?token=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&uuid=f2570e4f-1899-4ee5-8f53-935c77d9d819%3A2%3A1&pii=&in=false IP192.243.59.12:443 ASN#39572 DataWeb Global Group B.V.
CertificateIssuerLet's Encrypt Subjectultimatumrelaxconvince.com FingerprintED:7E:CD:40:05:B3:70:C3:C7:CF:3A:82:20:FE:24:2D:C6:55:33:F3 ValidityTue, 23 Apr 2024 10:50:54 GMT - Mon, 22 Jul 2024 10:50:53 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /api/users?token=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&uuid=f2570e4f-1899-4ee5-8f53-935c77d9d819%3A2%3A1&pii=&in=false HTTP/1.1
Host: ultimatumrelaxconvince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ultimatumrelaxconvince.com/api/users?token=L3RpMzhkMHFtdD9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTE2NDM5Mzg4
Cookie: u_pl=16439388; ain=eyJhbGciOiJIUzI1NiJ9.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.of3Mg7ePz5Jcxrgb_qTgxkK_Hl3rbUHkZZINovr3tJg; uid_id2=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Thu, 25 Apr 2024 15:51:50 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://holdhostel.space/?6622842d7176c&ag_custom_domain=16439388
Set-Cookie: uid_id2=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1; expires=Thu, 02 May 2024 15:51:50 GMT
iprcabab23132278522f4dd93bb590ab8ed0=5188702; expires=Fri, 26 Apr 2024 15:51:50 GMT
pdhtkv=true; expires=Fri, 26 Apr 2024 15:51:50 GMT
uncs=1; expires=Fri, 26 Apr 2024 15:51:50 GMT
pdhtkv28=true; expires=Fri, 26 Apr 2024 15:51:50 GMT
uncs28=1; expires=Fri, 26 Apr 2024 15:51:50 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7630d4297798b6f38e6bd5b4e24a1c49
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| ultimatumrelaxconvince.com/favicon.ico | 172.240.108.76 | | 0 B |
URL ultimatumrelaxconvince.com/favicon.ico IP172.240.108.76:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: ultimatumrelaxconvince.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://ultimatumrelaxconvince.com/api/users?token=L3RpMzhkMHFtdD9rZXk9OWNhNjAxYTlmNDdjNzM1ZGY3NmQ1Y2E0NmZhMjZhNjYmc3VibWV0cmljPTE2NDM5Mzg4
Cookie: u_pl=16439388; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjQzOTM4OCwiayI6ImQxMWU2YjZiZTkwODQ1MTkwOTczNTk2MjhiNjcwYTgyIiwic2lkIjoiQ0YtMjkzMV9sYXllcl8xIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjA4MTgxLCJwaWQiOjI4Mjc2LCJhbiI6dHJ1ZSwibGFuIjp0cnVlLCJjaWQiOjE2LCJhaWQiOjI4LCJwdCI6NCwicGsiOiJ0aTM4ZDBxbXQiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8vcG9ybmtpbmt5LmNvbS92aWRlb3MvMTc2MzcvYnVzdHktZW1hLWJ1c3R5LWVtYS0xMC0wMi0yMDI0LyIsImFyIjpbXX19.of3Mg7ePz5Jcxrgb_qTgxkK_Hl3rbUHkZZINovr3tJg; uid_id2=f2570e4f-1899-4ee5-8f53-935c77d9d819:2:1; cjs=t
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Thu, 25 Apr 2024 15:51:50 GMT
Content-Type: image/x-icon
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 72d476368c541fcfcdabc4a90f2a57f8
Strict-Transport-Security: max-age=0; includeSubdomains
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn1.png | 172.67.163.114 | 200 OK | 6.9 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn1.png IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hasha67051906425835b13dc4292c6fe2ef7 c96b01fb21c60a17fad9e89f235fdb8809ffc43d f000409df7dd5222fc51cc35113519a133596c011f61bc5a7f65f9dcd2843a37
GET /lg/lg_0324/land_lg_140324_en/image/btn1.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/png
content-length: 6866
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-1ad2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1524
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4xX1jW4lUN9SKKuM2bWiiHLKSMDDbcFggU8%2BOrcWI77NhuUk89UmS8BhDk0z%2Bv18RDx1QgYM7SBpQSt%2BdRHADIlWCj6%2BkMBmZClPiERcuvPusZwM817XHHD4HLaTslVIFsgNFxYh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f31baac5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn2.png | 172.67.163.114 | 200 OK | 9.8 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/btn2.png IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typePNG image data, 339 x 207, 8-bit colormap, non-interlaced Hash8c7c430e736c07b069cf61a2870c7254 a1b6cf722997131aa569f2214df2ce8a9e6e5630 42269355807fe5c4d7dabbccff1cc602725b5ffccae86759412219b83198a180
GET /lg/lg_0324/land_lg_140324_en/image/btn2.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/png
content-length: 9771
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-262b"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1524
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M%2FRw%2BGOSP1Fzw4Np3%2BJef4SfznZ4Cx12EIaBk%2B4kLoGIAK86oIbx2KQUD3oLBPyvU0HdbiZ95mj3W5ZtbRhhCGZAyPk9%2BXB6WE%2FKnei891QSrbKPCvi%2FozDZgo30ir8jDlEPXM08"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f31cab05687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_open.jpg | 172.67.163.114 | 200 OK | 84 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_open.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hasha3efbcb7561dddaeb36ba22fb8fae56f a9363a7f6b6e9a5a6dcbb37a0abfa7bb3ab3ea1d d95424c3f3857c13ff9f6a957f805b188a568ce769b51ee9fe68c8fd3537b319
GET /lg/lg_0324/land_lg_140324_en/image/g1_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 84260
last-modified: Tue, 12 Mar 2024 16:35:34 GMT
etag: "65f08456-14924"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LXis4Q2wgsnTlc5q19dle8yZ4gXRQB1aGk949rkfwC5pAs99xZQIF4apKuTVzNNCpjy68Vg4p1ZDmq6LvSRt3zLIAuE2JwwN%2FszyAAU%2BuDbxhpdzVTJyZUtAo1EzSdjAVrWiv4Pz"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33cc7e5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_close.jpg | 172.67.163.114 | 200 OK | 40 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g1_close.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash3d830c378aa76c9caa82a73805459893 4a48546372f2ef6311cbed974d536273bcfdd711 8d88b039c0e88133bd2f53dc2fef48ea2d8bdae4eb6e3162fec9db714f97adea
GET /lg/lg_0324/land_lg_140324_en/image/g1_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 40179
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-9cf3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BI6vxEdCwN6MDsg1xwcRRS7fFiAfnTkHi0afY9gPzSvuBnDnF7TXb%2Fr3gnMLnXHtN7%2F5ICHbyvmpubg1karhGT%2BOw%2FCfZ0iTycrBmZCcTsd3eXuCQfV8hZ9PX%2B77vnhEpd1ysYo0"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33dc805687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_open.jpg | 172.67.163.114 | 200 OK | 80 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_open.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash12e061b10b2c654a24ea704af3aaec43 9c506625e1fa700f0e6522cced2a53b0cde2bd54 d321fc26bb399bd642b1a3ae059a03308d286526e6b87a9cb37ba63833673372
GET /lg/lg_0324/land_lg_140324_en/image/g2_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 79598
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-136ee"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cmmMnTi1DryXbic2YoCttsPvf5NcUvDVLj5slHDoPRwNDob0pTxCpuH0zMNJhUGHOpOFrz6Ar5tHU49CUnPq4zBPFzSCc%2Bx2f31yTog8a981KO%2FdHkhMuNjSct0DvaW2NwIomC%2FC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33dc855687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_close.jpg | 172.67.163.114 | 200 OK | 42 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g2_close.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash955f59a0876a28b432c71c0d274727c7 789778a09f2fa8f8bd24be2bb781914f5070dd3d 40e8cd16f27d5d6a0cfd007881651ef8acd93ba95423c05741bc410454eabf40
GET /lg/lg_0324/land_lg_140324_en/image/g2_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 41478
last-modified: Tue, 12 Mar 2024 16:35:34 GMT
etag: "65f08456-a206"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yAU%2FhlajTEOIxVQ4FV3HrBB301czYS%2BnsMNDK0lpGg%2FlVyXq1YVUo2AJhd%2BrSLjS0ZCFz6Xj2hKTgrCg7cDoUekgLwBdDrpL55wg6bULs%2F1fwXj58lONRcBIF8xXUIekqjJml6CX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33dc885687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_open.jpg | 172.67.163.114 | 200 OK | 63 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_open.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashd837068776c28a251131d2c0138c5db4 bc8d3e395fa77a6b801f13d1c22ff159776cc430 a8364b19810c700ee3899c55089ca678291758ee0d62dbad821e2a6d73b08c93
GET /lg/lg_0324/land_lg_140324_en/image/g3_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 63206
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-f6e6"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Er6n3vhz%2B3DgH4iY4dARqauwIp6NxtnmAX4mKwL0ycS%2F0PMcDuKseXcebuEe0ZSqA6CO1S%2BMTEhHwWuI2WOYvojoc0xtOzEFxjBl6F%2Bts8hdtc7T9E5QZdy3d3yGG6KwpqX5vfOO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33ec8d5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_close.jpg | 172.67.163.114 | 200 OK | 41 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g3_close.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashaa7031c41077d720cfc935e8de98de95 47aaf9ec464983016d35bb8150928c7f96cdff8c 6a49dc8fe71fafd7db501c43d96537be26a508a2c8a932ff8f03746bc9a55a83
GET /lg/lg_0324/land_lg_140324_en/image/g3_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 40609
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-9ea1"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b%2FTEfM%2Fn6IbN4BInKIhZ2QPc9JgKQSuG3WFoUNNQbKM7f2Ypmy6i9RLNspqtOOoeeeB6Yi13HRMbEj%2FpGPJTdmFTAwP7%2BvKR4Scn9wlWCdI1srGJ8DocZsGUwaMhamx7ryW4ySs7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33fc9f5687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_open.jpg | 172.67.163.114 | 200 OK | 73 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_open.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hashc37fec311feadcbd0c77987b383b0596 9a8f5df2805241f6bc484151dc31f3b72bb9a196 a61a23797d6b68ed79222d950596e90da320e59f8ee23e7eb776c94ee0d6734c
GET /lg/lg_0324/land_lg_140324_en/image/g4_open.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 72874
last-modified: Tue, 12 Mar 2024 16:35:36 GMT
etag: "65f08458-11caa"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E4IWdXAzyhnMigo%2BuOlzNqIJNUdgGTTkPXnyk8%2BoyajnM8DQE6J%2FoDt9ma0l5JWIV3R2kEzYbKxGkONhAoWgwYpIF6jE0Op5wyR5L01Fzq4Ms0gHVZixwo5fesXmmbc1isJsQTQN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33fca15687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_close.jpg | 172.67.163.114 | 200 OK | 41 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/g4_close.jpg IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 480x1071, components 3 Hash4735a029efd2d2e8b15fab5879842219 82ac18ec8aae9a2cc311cdb3b92862e56d161f99 11c0bdd5fc2ba1dfea6ccaedded312f27fd5d5ddf21f24ee607ad05c2c0f197b
GET /lg/lg_0324/land_lg_140324_en/image/g4_close.jpg HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/jpeg
content-length: 40656
last-modified: Tue, 12 Mar 2024 16:35:35 GMT
etag: "65f08457-9ed0"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1396
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FzJ9HGUBv9%2BopdGuvS5vSTaaFsHYxbVFShU6QMNhk9gEyugI1gHCo1faDQDwgDfE4hVy3gzrDtaLQp4QDcPiOXgxWPNnH7Qk7LVvYw7MbxbmwslKyuUJZFw159EpXMa%2BuRGs8auO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f33fca25687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/fav.png | 172.67.163.114 | 200 OK | 1.4 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/image/fav.png IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typePNG image data, 32 x 32, 8-bit colormap, non-interlaced Hash10c5dd857fd3653492ef5eeaa86cd48b 193484a907a40d7b145af2136ef83bef593d2f21 a689201508b9dc7b2cc3049c7d89947f96a19790411506ecd6eb1875374fe329
GET /lg/lg_0324/land_lg_140324_en/image/fav.png HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: image/png
content-length: 1425
last-modified: Tue, 12 Mar 2024 16:35:33 GMT
etag: "65f08455-591"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1120
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IXA2lC1x11wq3lAqi%2BTOwU%2FL4WXypRvutk220t29Soy%2BwZOydXHK9Yp5r%2FzYmDEYKflX3%2B5zjSm4Fy3EeAfkxAN7WNjoz4zqp56joNe6Pan7ziBGXKYXViRQISa%2BNb%2FQIbyDbams"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f346d355687-OSL
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/libs/jquery.min.js | 172.67.163.114 | 200 OK | 36 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/libs/jquery.min.js IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeJavaScript source, ASCII text, with very long lines (65451) Hasha09e13ee94d51c524b7e2a728c7d4039 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef
GET /lg/lg_0324/land_lg_140324_en/libs/jquery.min.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:38 GMT
etag: W/"65f0845a-1538f"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1524
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kzQOzLwyCucfk3%2FJJQLadmP2qQ63kASn4%2B1G3fgF9%2FHJ4Q3JzEzkz8ahthj6fyjFPCM%2FUyM5AiXWQ%2FaElya570j0BBl%2BzjHOqwiUJhZtcJK1kZu%2BeSTd8EvB2ciW%2FOdi9MRQ4YsZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f31aaa05687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/awpx_click.js?v=005 | 172.67.163.114 | 200 OK | 11 kB |
URL GET HTTP/3theeverydaygame.com/awpx_click.js?v=005 IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
Hash7aeb87811ad3a82fde3e2783544819ee d1d9174cbcbb1abdccee6841f170ba21f899925b 7fff603702e9bea03cf47ba47947bb7f8655eb7fcb1c8f7091e9a38d8f5d949c
GET /awpx_click.js?v=005 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: application/javascript
last-modified: Thu, 09 Mar 2023 09:49:36 GMT
etag: W/"6409abb0-5d2"
cache-control: max-age=14400
cf-cache-status: HIT
age: 3986
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vp6MEGvELPwEnxtPhW2fWeiiNXDtIcgnnioBE%2BUU2Ljz9HSX6y8mRmZS31zbZhup3K34xfZLqHUTcHN8zPX6eD8VG8L7m9cVWh6G0jEzeEuTTAU8q2q4R2Z1PRXSanjsSbnv0gTo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f31baab5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml | 35.244.181.201 | | 444 B |
URL aus5.mozilla.org/update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml IP35.244.181.201:0 ASN#396982 GOOGLE-CLOUD-PLATFORM
File typeXML 1.0 document, ASCII text, with very long lines (332) Hash3b324dec137a87ef7e24a30a65b13dd0 c0faa95b2f1018e264b3a14aaf50d1003e6c27b3 6cd0b591d9239fc8564627e92a804fc261951b1cbaf5fa58a8ada3cc13f51463
GET /update/3/GMP/111.0a1/20240129201730/Linux_x86_64-gcc3/null/default/Linux%205.15.0-102-generic%20(GTK%203.24.37%2Clibpulse%20not-available)/default/default/update.xml HTTP/1.1
Host: aus5.mozilla.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Cache-Control: no-cache
Pragma: no-cache
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
rule-id: unknown
rule-data-version: unknown
content-signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2024-06-09-11-51-10.chain; p384ecdsa=CA2o6vuWZ2Q6WeO6cPjUFgZDMzzMQYL7yr6aD2MsXRBVRFjSj7-cXzYk1_62DFu6vDbjEuNRbO52nACaqkwfb_kBhmQfnwrDAnDtxElOcOFLXDedU067o43yOh0Vdj8T
strict-transport-security: max-age=31536000;
x-content-type-options: nosniff
content-security-policy: default-src 'none'; frame-ancestors 'none'
x-proxy-cache-status: EXPIRED
content-encoding: gzip
via: 1.1 google
date: Thu, 25 Apr 2024 15:50:11 GMT
content-type: text/xml; charset=utf-8
vary: Accept-Encoding
content-length: 444
age: 117
cache-control: public,max-age=90
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css | 172.67.163.114 | 200 OK | 3.3 kB |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/css/main.css IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeASCII text, with very long lines (3548), with no line terminators Hashaac1493fdaa516c07b05dc277adf9047 40c8ee3e4d54dfff6dcaea969bcad3d20ec9b796 8f9a48a298195eefb30fffd1c8d458eac7ecc2503a77ba8a5bc47bad68b61c37
GET /lg/lg_0324/land_lg_140324_en/css/main.css HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: text/css
last-modified: Tue, 12 Mar 2024 16:35:32 GMT
etag: W/"65f08454-ce3"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1524
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Si1E%2BzdCk%2F0s2YCxyw9hDcBLE8LPy3%2BMLH8BO8N3lVl%2FxjIR7U%2Bv%2BwJQhabpgnf2pVN2R3%2FhZIF4Dnsg2YAuueJ%2FuOv26yGOr17qJtjioqJM7uFXruP324Q%2B6BZyPPrptsdyv1wD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f31aa9f5687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/scripts/main.js | 172.67.163.114 | 200 OK | 521 B |
URL GET HTTP/3theeverydaygame.com/lg/lg_0324/land_lg_140324_en/scripts/main.js IP172.67.163.114:443
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typetroff or preprocessor input, ASCII text, with very long lines (567), with no line terminators Hash42a310913ab3c9f8c9241c154fd7af4a 8acd5b33349b86bb7ea9da2f609ca7230ad5761d ac4d23ed1f3208f4515cb3561fc74ece439d34496675ae90917061a858c7b79a
GET /lg/lg_0324/land_lg_140324_en/scripts/main.js HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: application/javascript
last-modified: Tue, 12 Mar 2024 16:35:38 GMT
etag: W/"65f0845a-209"
cache-control: max-age=14400
cf-cache-status: HIT
age: 1524
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vJBjOrEyW1mJiRsJeSiKWOunEaDljRAPeFFDUPb0QBOilVGqHoKC4OGN52IRDlhtJ6qgGC7eYTZw66%2BuvuGyXoURrhNdrKABeSrXQzHeHL09nHwGzuUNHtVN%2Bp7%2B6FN3phFi%2By69"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 879f7f31cab15687-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
|
|
| holdhostel.space/?6622842d7176c&ag_custom_domain=16439388 | 172.67.192.172 | 302 Found | 2.2 kB |
URL User Request GET HTTP/2holdhostel.space/?6622842d7176c&ag_custom_domain=16439388 IP172.67.192.172:443
CertificateIssuerGoogle Trust Services LLC Subjectholdhostel.space Fingerprint30:62:41:BC:7C:17:FC:EE:0D:5B:5B:39:AE:06:1C:8A:08:6D:67:D6 ValiditySat, 20 Apr 2024 18:12:17 GMT - Fri, 19 Jul 2024 18:12:16 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?6622842d7176c&ag_custom_domain=16439388 HTTP/1.1
Host: holdhostel.space
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ultimatumrelaxconvince.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 25 Apr 2024 15:51:50 GMT
content-type: text/html
location: https://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169
set-cookie: c_2022b6829ad3bc8a5d74a4bfe5cf4db8=1; Expires=Fri, 26-Apr-24 15:51:50 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
z_dd834028817d054ef3568898fa07ee8f=1; Expires=Fri, 26-Apr-24 15:51:50 GMT; Domain=holdhostel.space; Path=/; Secure; SameSite=None
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WgroXZmcBNTFHKmtzs9NCWO2SrDXv8z40%2F2l8gRCVTczsfnTI1cjQSsV17eMhgNbVwC4Ut9j3%2B5ITJszsHkeI9VF9IiampUQVvZAmOl5MUmVi%2FpDTg22YwjzRc%2FCFKBrTQrT"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879f7f2e3baab4ed-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| ln.gamesrevenue.com/px1.js | 5.161.79.44 | 200 OK | 15 kB |
URL GET HTTP/2ln.gamesrevenue.com/px1.js IP5.161.79.44:443 ASN#213230 Hetzner Online GmbH
Requested byhttps://theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 CertificateIssuerLet's Encrypt Subject*.gamesrevenue.com FingerprintB2:A3:99:AD:22:46:FC:93:41:E9:59:40:F5:09:B0:23:B7:5B:FA:67 ValidityWed, 13 Mar 2024 09:55:06 GMT - Tue, 11 Jun 2024 09:55:05 GMT
File typeASCII text, with very long lines (15239) Hashb01fc426cbc4f33a52a28ee9ca2e2050 577332c8c5f62167ad432c5d20b3ca285e75c91e d40fc3bebe2dc3c28f08f2f4f5a6059425ccc5541ada3f0945f7539e90374441
GET /px1.js HTTP/1.1
Host: ln.gamesrevenue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://theeverydaygame.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: application/javascript
last-modified: Fri, 22 Dec 2023 10:12:56 GMT
etag: W/"65856128-3b88"
content-encoding: gzip
X-Firefox-Spdy: h2
|
|
| theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 | 172.67.163.114 | 200 OK | 2.2 kB |
URL User Request GET HTTP/2theeverydaygame.com/lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 IP172.67.163.114:443
CertificateIssuerLet's Encrypt Subjecttheeverydaygame.com Fingerprint1C:2A:70:BB:0D:8A:A7:07:B6:01:2D:71:87:2E:C4:07:3D:FF:45:57 ValidityFri, 01 Mar 2024 17:23:46 GMT - Thu, 30 May 2024 17:23:45 GMT
File typeHTML document, ASCII text, with very long lines (2342), with no line terminators Hashf2b591cac4c748d52e309c60e64da6f1 0fa9fb46b9cf23869a0872c64e4712d02fc1d08f f291524129ddf85980c7bed9af15405c44e6d39c00810285d0a604c759b43c7a
GET /lg/lg_0324/land_lg_140324_en/index.html?utm_campaign=pu_lg_terra_no_adult&utm_medium=click&utm_source=pu&utm_content=16439388&bnid=land_lg_140324_en&land=land_lg_140324_en&crID=2503015&zID=100169 HTTP/1.1
Host: theeverydaygame.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://ultimatumrelaxconvince.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 25 Apr 2024 15:51:51 GMT
content-type: text/html; charset=UTF-8
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Mis8%2Bqj072Cis%2FYA1zvxHMrFRYE%2BKO%2B%2FhrScPA4aq3NKdQYQlb%2FtoXbGlTs6mO5Prn90hrQS9k10RwxgjUt%2B%2FKmUmqwcJZyV7YlOOorjgd%2B0xrr0mevyUVLQ7dRggw6YDa0VwTO3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 879f7f2eaebab4fa-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|